Thanks for help, It worked, I have now a certificate with a 1024bits key. Now I need to make sure all users will have an appropriate windows version (with the good CSP). Regards Maxime. > Maxine, > > See if the following snippet works. > ... > > <OBJECT classid="clsid:43F8F289-7A20-11D0-8F06-00C04FC295E1" > codebase="xenroll.dll" > id=Enroll > > </OBJECT> > > <SCRIPT language="VBScript"> > > Const CRYPT_EXPORTABLE = &H1 > Const CRYPT_USER_PROTECTED = &H2 > Const AT_KEYEXCHANGE = &H1 > > Enroll.KeySpec=AT_KEYEXCHANGE > Enroll.HashAlgorithm="SHA1" > dwModulusSizeInBits = CLng ( 1024 ) > Enroll.GenKeyFlags= (65536 * dwModulusSizeInBits ) + CRYPT_EXPORTABLE + > CRYPT_USER_PROTECTED > > .... > > _____________________________________ > Greg Stark > Ethentica, Inc. > [EMAIL PROTECTED] > _____________________________________ > > ----- Original Message ----- > From: "Maxime Dubois" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, February 06, 2001 6:20 AM > Subject: Key length with IE and Xenroll? > > > Hi all, > > > > I am using Xenroll.dll to create certificate request (PKCS10) with IE, > > but the RSA key is always 512 bits! How can I have a stronger key (1024 > > minimum). > > I test several value for the properties GenKeyFlags or KeySpec, but no > > changes... > > Hope you can help me. > > Here is the script I used: > > > > <SCRIPT LANGUAGE="VBScript"> > > > > Sub Submit_OnClick > > > > Dim TheForm > > Set TheForm = document.CertReqForm > > > > szName = "O=" & _ > > TheForm.OrganizationName.value & "; CN=" & _ > > TheForm.CommonName.value & "; 2.5.4.45=" > > & _ > > TheForm.Uid.value & "; C=" & _ > > TheForm.CountryName.value & _ > > "; 1.2.840.113549.1.9.1=" & _ > > TheForm.EmailAddress.value > > Enroll.EnableT61DNEncoding = True > > Enroll.KeySpec = 1 > > Enroll.GenKeyFlags = 3 > > sz10 = Enroll.CreatePKCS10(szName,"1.3.6.1.5.5.7.3.2") > > > > ... > > End Sub > > > > </SCRIPT> > > > > > > Maxime Dubois. > > > > > > > > > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List [EMAIL PROTECTED] > > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
