[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    Re: IE3.02 and X.509v3 Certificate Authorities (Doesn't Work)
From:       Luke Koops <koops () ENTRUST ! COM>
Date:       1997-04-25 19:58:08
[Download RAW message or body]


I think I know what your problem is.  After you import the CA
certificate, you see the new certificate in the list of sites, but you
cannot use it to authenticate certificates which are presented to your
browser.  If you exit IE3.02, and then run it again, the CA certificate
will work for you.  I don't know why this behaviour was introduced,
perhaps it is a bug.

A different problem I have encountered is with firewalls.  A fire wall
can be configured to disable ActiveX, as a result CERTENR3 will not
work.  The fire walls do this by filtering anchors out of the OBJECT tag
in all html that it passes through the gateway.  IE will give an error
424 if this happens.  Hopefully the ability to import certificates into
IE will be built into some future release of the browser, and not depend
upon an activeX control such as CERTENR3.

Luke

>----------
>From:  Svein-Tore Omdahl[SMTP:sveint@LINK.NO]
>Sent:  Friday, April 25, 1997 10:27 AM
>To:    CryptoAPI@LISTSERV.MSN.COM
>Subject:       Re: IE3.02 and X.509v3 Certificate Authorities (Doesn't Work)
>
>I've experienced the same when running under Windows NT.  Neither have I had
>any luck using the CERTENR3 ActiveX component when running NT to generate
>client certificates.  Even the Verisign site failed to make CERTENR3 generate
>keys.  Has anybody experienced anything similar to this problem?
>
>Svein-Tore
>

----------------------------------------------------------------
Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
contains important info including how to unsubscribe.  Save time, search
the archives at http://microsoft.ease.lsoft.com/archives/index.html

[prev in list] [next in list] [prev in thread] [next in thread]