Hi,
For me after installing the High encryption patch it work fine. MSIE and also
Netscape (before 4.73) already support CA Certificate with 1024 bits without
installing any patch. You should check it out again.
Regards,
Sorot
Daniel Hirscher wrote:
> Hi,
>
> I have installed every available patch to Windows and IE.
>
> I can import my CA certificates without problems, they are
> high keylength (1024). The user certificates are in pkcs7 format and
> fail every time with error 80092004. I tried to set all the IE
> internet security options to low, but no success.
>
> Any other idea?
>
> BTW: Everything works fine with netscape.
>
> Hallo Don, 30 Nov 2000!
> > Hi there,
> > I think your problem may come from the Key Length of the certificate.
> > Since Netscape 4.73 can generate the certificate with High Key length
> > (1024 bit) but MSIE4.x and also 5 and 5.5 don't support High Key Length.
> > You may have to download the patch from Microsoft to make your IE capable
> > of using high key length.
> >
> > Regards,
> > Sorot P.
> >
> > Daniel Hirscher wrote:
> >
> > > Hello list,
> > >
> > > when I try to install my own certificates in IE 5.5, I
> > > always get the error:
> > >
> > > 80092004 The certificate could not be installed.
> > >
> > > What's wrong? Config problem?
> > >
> > > The only information about the error ist, that certificates
> > > created with Netscapes <keygen ...> tag cannot be
> > > importet into IE 4.x+, but this is not true. The
> > > certificates createt with IE itself cannot be importet
> > > as well.
> > >
> > > I'm creating certificates with
> > > openssl -name CA_name -spkac file_from_NS
> > > or
> > > openssl -name CA_name -in file_from_IE
>
> --
> cu Daniel
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]