Certificate Problem!

K

Krit

Dear sir,
I'm not sure,is it right here posting about certificate?
I'm using Microsoft CA Authority, and use it to generate server,client
certificates.
Normally, I uses Microsoft Enhanced Cryptographic Provider v1.0 as CSP.
What I concern is encryption algorithm. But with that CSP, it provides RC4
right?
If I want to use 3DES as an encryption algorithm, what CSP should be used?
Someone have told me that I must find out 3rd party application to restict
encryption algorithm. Does anybody know about this?

Best Regards,
Krit
 
D

David Cross [MS]

The enhanced CSP supports 3DES, it also supports RC4 and DESX and... It all
depends on what application you want to use 3DES for. Some apps support
multiple algs and some apps negotiate with the server on which alg to use.
Do you have a specific application you want to force 3DES?
 
K

Krit

Thank you to your response David,
There are 2 places where I use certificates. The first one is external
interface of ISA,
it is to certified my web site behided ISA. And the second is at a website
on IIS.
These are for SSL connection of internal and external using. But I've never
known
how to restict them to use 3DES or any algorithms I want. So, what can I do
to
configure these application to use 3DES?

David Cross said:
The enhanced CSP supports 3DES, it also supports RC4 and DESX and... It all
depends on what application you want to use 3DES for. Some apps support
multiple algs and some apps negotiate with the server on which alg to use.
Do you have a specific application you want to force 3DES?

--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

Krit said:
Dear sir,
I'm not sure,is it right here posting about certificate?
I'm using Microsoft CA Authority, and use it to generate server,client
certificates.
Normally, I uses Microsoft Enhanced Cryptographic Provider v1.0 as CSP.
What I concern is encryption algorithm. But with that CSP, it provides RC4
right?
If I want to use 3DES as an encryption algorithm, what CSP should be used?
Someone have told me that I must find out 3rd party application to restict
encryption algorithm. Does anybody know about this?

Best Regards,
Krit
 
D

David Cross [MS]

That might be a better question for a ISA newsgroup unfortunately - I am not
familiar with their configuration capabilities.

--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

Krit said:
Thank you to your response David,
There are 2 places where I use certificates. The first one is external
interface of ISA,
it is to certified my web site behided ISA. And the second is at a website
on IIS.
These are for SSL connection of internal and external using. But I've never
known
how to restict them to use 3DES or any algorithms I want. So, what can I do
to
configure these application to use 3DES?

David Cross said:
The enhanced CSP supports 3DES, it also supports RC4 and DESX and... It all
depends on what application you want to use 3DES for. Some apps support
multiple algs and some apps negotiate with the server on which alg to use.
Do you have a specific application you want to force 3DES?

--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

Krit said:
Dear sir,
I'm not sure,is it right here posting about certificate?
I'm using Microsoft CA Authority, and use it to generate server,client
certificates.
Normally, I uses Microsoft Enhanced Cryptographic Provider v1.0 as CSP.
What I concern is encryption algorithm. But with that CSP, it provides RC4
right?
If I want to use 3DES as an encryption algorithm, what CSP should be used?
Someone have told me that I must find out 3rd party application to restict
encryption algorithm. Does anybody know about this?

Best Regards,
Krit
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top