Re: What US companies need to know about RSA

[EKR]

Dr Stephen Henson <[EMAIL PROTECTED]> writes:
> Whereas the current situation is that Netscape supports DSA cient
> certificates in its browsers but MS doesn't at all. This doesn't help
> with SSL though.
Especially since as of 4.6 the Netscape DSA client auth code
was broken. It generate the DSA signature as concatenated
r,s rather than as a SEQUENCE OF as it's supposed to.

This may have been fixed in 4.7. I haven't checked.

-Ekr

-- 
[Eric Rescorla                                   [EMAIL PROTECTED]]
          PureTLS - free SSLv3/TLS software for Java
                http://www.rtfm.com/puretls/
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]