Actually, after installing the newer version of the JSSE, I was able to get
the test certificate form Verisign to work properly, running 128 bit.

Even after setting the shared attribute to true, IE still seems to renew
the session every 2 minutes or so, but Netscape seems to do fine.

I think IE is trying to be to 'smart', and after so much idle time, it
re-negotiates with the server, and new session is created.  Any thoughts on
how to defeat this?

Thanks for the info on JSSE!!!!!!!!!

James Birchfield

Ironmax
a better way to buy, sell and rent construction equipment
5 Corporate Center
9960 Corporate Campus Drive,
Suite 2000
Louisville, KY 40223


|--------+------------------------------------>
|        |          [EMAIL PROTECTED]   |
|        |          Sent by:                  |
|        |          owner-orion-interest@orion|
|        |          server.com                |
|        |                                    |
|        |                                    |
|        |          10/26/00 04:12 PM         |
|        |          Please respond to         |
|        |          Orion-Interest            |
|        |                                    |
|--------+------------------------------------>
  
>-------------------------------------------------------------------------------------------------------------------------------------|
  |                                                                                    
                                                 |
  |       To:     Orion-Interest <[EMAIL PROTECTED]>                      
                                                 |
  |       cc:     [EMAIL PROTECTED], 
[EMAIL PROTECTED], [EMAIL PROTECTED],           |
  |       [EMAIL PROTECTED]                                                              
                                                 |
  |       Subject:     Re: Obtaining an SSL Certificate                                
                                                 |
  
>-------------------------------------------------------------------------------------------------------------------------------------|




Is there any specific 'type' of certificate you requested from Verisign?
We are in desperate need to get 128 bit running on our production site, but
so far, I have only gotten the 40 bit test cert from thawte to work
correctly.  I could not get keytool to successfully import the test cert
that verisign gives.  Any help would be appreciated.

James Birchfield

Ironmax
a better way to buy, sell and rent construction equipment
5 Corporate Center
9960 Corporate Campus Drive,
Suite 2000
Louisville, KY 40223


|--------+------------------------------------>
|        |          Sach Jobb                 |
|        |          <[EMAIL PROTECTED]>         |
|        |          Sent by:                  |
|        |          owner-orion-interest@orion|
|        |          server.com                |
|        |                                    |
|        |                                    |
|        |          10/26/00 02:08 PM         |
|        |          Please respond to         |
|        |          Orion-Interest            |
|        |                                    |
|--------+------------------------------------>
  >
-------------------------------------------------------------------------------------------------------------------------------------|

  |
|
  |       To:     Orion-Interest <[EMAIL PROTECTED]>
|
  |       cc:     "'[EMAIL PROTECTED]'"
<[EMAIL PROTECTED]>
|
  |       Subject:     Re: Obtaining an SSL Certificate
|
  >
-------------------------------------------------------------------------------------------------------------------------------------|




I have it working with netscape 128bit from Verisign, -->BUT<-- make sure
that you have the US version of the JSSE that supports 128bit encryption
(you have to go and download this).

sach


On Thu, 26 Oct 2000, Paul Knepper wrote:

> Hi,
>
> I've successfully installed a 40-bit Versign Cert.  There was no 128-bit
> "Javasoft" Cert available from Verisign.
> Does anyone know of a 128-bit Cert that works with Orion.
>
> Thanks,
> Paul
> [EMAIL PROTECTED]
>
>
> ------------------------------------------------
> Re: Obtaining an SSL Certificate
>
>
> From: Dale Bronk
> Subject: Re: Obtaining an SSL Certificate
> Date: Tue, 29 Aug 2000 05:03:39 -0700
>
>
>
> Did you get a 40-bit or 128-bit cert?  Orion informed me we can use
128-bit
> if we get the domestic JSSE from Sun.
>
> Dale
> ------------------------------------------------
>












Reply via email to