RE: IE request generation just stopped working...

2002-11-14 Thread Shalkebaev,AntonMSCAG
Hi 
I think you can specify two objects on one page and first try to use new
component if it failed you will use the old one.(This is not hard to
implement). 
If your users take about their security they should upgrade the vulnurable
IE.
If you need help please post your page.
Anton

-Original Message-
From: Andrew Brady [mailto:Andrew.Brady;ecmwf.int]
Sent: Thursday, November 14, 2002 03:37
To: [EMAIL PROTECTED]
Subject: Re: IE request generation just stopped working...


Before I get dirty and write the VBSCRIPT

Has anyone already written the vbscript to support both
the old and new versions simultaneously?

Some of my users have high security so cannot dl and
run the new dll.

Andy

Shalkebaev,AntonMSCAG wrote:
 There is no any secret in your file you have:
 OBJECT classid=clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1
 CODEBASE=xenroll.dll id=Enroll
 Your should place new xenroll.dll to your web server for example you put
it
 to root directory and it accessed from http://yourserver/xenroll.dll in
your
 file change CODEBASE=/xenroll.dll and clients will be asked to install new
 library, if there security settings not so high :).
 Anton
 -Original Message-
 From: Richard Levitte - VMS Whacker [mailto:levitte;stacken.kth.se]
 Sent: Tuesday, October 15, 2002 05:41
 To: Shalkebaev,AntonMSCAG
 Cc: [EMAIL PROTECTED]
 Subject: Re: IE request generation just stopped working...
 
 
 In message B5FC94784717D211931A006008911A69018B4B41@MSC0E001 on Tue, 15
 Oct 2002 21:55:44 +0900, Shalkebaev,AntonMSCAG
 [EMAIL PROTECTED] said:
 
 ShalkebaevA Just change clsid to 127698e4-e730-4e5c-a2b1-21490a70c8a1
 ShalkebaevA and place your new xenroll.dll to a web server for none
updated
 clients
 
 OK, that worked fine.  How should the users with non-updated
 xenroll.dll install it?  Some secret procedure I should know about?
 

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE request generation just stopped working...

2002-10-15 Thread Richard Levitte - VMS Whacker

In message [EMAIL PROTECTED] on Tue, 15 Oct 2002 
13:59:37 +0200 (CEST), Richard Levitte - VMS Whacker [EMAIL PROTECTED] said:

levitte I did a windows update a few days ago, and since, that page stopped
levitte working.

Very precisely, it generates an empty (zero bytes) request.

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE request generation just stopped working...

2002-10-15 Thread Mark . Shoneman


Windows has supplied a hot fix to their enrollment dll go to m$KB and
look at Q323172. I think the problem may be the new xenroll.dll.

  Mark S.


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: IE request generation just stopped working...

2002-10-15 Thread Shalkebaev,AntonMSCAG

Just change clsid to 127698e4-e730-4e5c-a2b1-21490a70c8a1
and place your new xenroll.dll to a web server for none updated clients
Anton

-Original Message-
From: Richard Levitte - VMS Whacker [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 15, 2002 04:00
To: [EMAIL PROTECTED]
Subject: IE request generation just stopped working...


I've probably hacked this incorrectly.  I'm doing the usual
certificate request page for IE, with the usual VBscript to generate
a PKCS#10 request.

I did a windows update a few days ago, and since, that page stopped
working.  I'm attaching it, and would be really glad if someone could
tell me what things I got wrong (I also lack the possibility to choose
the key size, and would like that to happen as well).

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE request generation just stopped working...

2002-10-15 Thread Richard Levitte - VMS Whacker

In message B5FC94784717D211931A006008911A69018B4B41@MSC0E001 on Tue, 15 Oct 2002 
21:55:44 +0900, Shalkebaev,AntonMSCAG [EMAIL PROTECTED] said:

ShalkebaevA Just change clsid to 127698e4-e730-4e5c-a2b1-21490a70c8a1
ShalkebaevA and place your new xenroll.dll to a web server for none updated clients

OK, that worked fine.  How should the users with non-updated
xenroll.dll install it?  Some secret procedure I should know about?

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE request generation just stopped working...

2002-10-15 Thread Richard Levitte - VMS Whacker

In message [EMAIL PROTECTED] on Tue, 15 Oct 2002 
07:29:12 -0500, [EMAIL PROTECTED] said:

Mark.Shoneman Windows has supplied a hot fix to their enrollment
Mark.Shoneman dll go to m$KB and look at Q323172. I think the problem
Mark.Shoneman may be the new xenroll.dll.

Thanks, I'll read it when I can.

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: IE request generation just stopped working...

2002-10-15 Thread Mark . Shoneman


What happens is after you apply the new dll to your website and a
non-patched client trys to get a cert. a popup comes up
asking them if they want the new dll. If they hit yes, they get a cert., if
no they don't. At least that the way our site works.

Mark S.




Richard Levitte - VMS Whacker [EMAIL PROTECTED]@openssl.org on
10/15/2002 08:41:06 AM

Please respond to [EMAIL PROTECTED]

Sent by:[EMAIL PROTECTED]


To:[EMAIL PROTECTED]
cc:[EMAIL PROTECTED]
Subject:Re: IE request generation just stopped working...


In message B5FC94784717D211931A006008911A69018B4B41@MSC0E001 on Tue, 15
Oct 2002 21:55:44 +0900, Shalkebaev,AntonMSCAG
[EMAIL PROTECTED] said:

ShalkebaevA Just change clsid to 127698e4-e730-4e5c-a2b1-21490a70c8a1
ShalkebaevA and place your new xenroll.dll to a web server for none
updated clients

OK, that worked fine.  How should the users with non-updated
xenroll.dll install it?  Some secret procedure I should know about?

--
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]




__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: IE request generation just stopped working...

2002-10-15 Thread Shalkebaev,AntonMSCAG

There is no any secret in your file you have:
OBJECT classid=clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1
CODEBASE=xenroll.dll id=Enroll
Your should place new xenroll.dll to your web server for example you put it
to root directory and it accessed from http://yourserver/xenroll.dll in your
file change CODEBASE=/xenroll.dll and clients will be asked to install new
library, if there security settings not so high :).
Anton
-Original Message-
From: Richard Levitte - VMS Whacker [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 15, 2002 05:41
To: Shalkebaev,AntonMSCAG
Cc: [EMAIL PROTECTED]
Subject: Re: IE request generation just stopped working...


In message B5FC94784717D211931A006008911A69018B4B41@MSC0E001 on Tue, 15
Oct 2002 21:55:44 +0900, Shalkebaev,AntonMSCAG
[EMAIL PROTECTED] said:

ShalkebaevA Just change clsid to 127698e4-e730-4e5c-a2b1-21490a70c8a1
ShalkebaevA and place your new xenroll.dll to a web server for none updated
clients

OK, that worked fine.  How should the users with non-updated
xenroll.dll install it?  Some secret procedure I should know about?

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]