Are 128-bit or higher TLS connections supported?

When using EAP extensions to RADIUS, TLS is expressly required (per RFC). The RFCs refer to an LDAP store as well. I need to know if authenticated queries to a 4.x/5.x directory server over a minimium 128-bit TLS connection.
The config thoughts are to have an XP client authenticating to a RADIUS server using EAP and be authenticed to a Win2K/XP(/possibly Solaris 9) server. The EAP authentication would be to a 4.x/5.x directory server over a required 128-bit TLS connection. Does this sound possible with a Sun Directory Server (iPlanet 4.16 SP1 is currently in use)? Will this be supported in the near future (2 months)? Offline discussions may be warranted to clarify the configuration.....

iDS 5.1 on Solaris (not Windows) supports TLS with 128 bit encryption. However, I don't know if the 128 bit cipher suites show up in the console for SSL/TLS configuration, so you may have to configure it yourself over LDAP. The Admin Guide and the CLI Guide for iDS 5.1 should explain how to do this.

Similar Messages

  • Is the security encryption in Mozilla browser 128 bit or higher? I have a site that requires confirmation before I can use it.

    Just an information question, not a problem. A site that I want to use on line securely to transfer funds requires that I confirm that my browser supports or has 128 bit security encryption. The site offers to check my browser, which I did and it comes up saying that I don't meet 128-bit security encryption standard or something to that effect. I believe I have the latest version of Firefox/Mozilla installed -- updated just last week (Sept 8th, 2011).
    Does this browser have 128-bit security encryption?

    Firefox versions since Firefox 2 in in 2002 support AES-256 as you can see used on this forum.
    *https://developer.mozilla.org/en/Security_in_Firefox_2
    *https://www.fortify.net/sslcheck.html

  • WLS 5.1/128-bit w/1024/128 certificate SSL connections fail

    We have a 128-bit version of WLS 5.1 with the 128-bit SP8. SSL connections work with our original low-strength certificate, reporting during startup that it is "Using low strength SSL". If we replace the key/certificate pair with a new 128-bit version, SSL connections no longer work. The ciphersuites list has all of the supported suites in it. There are no exceptions or other problems reported in the log, but browsers fail to connect via SSL. I've not seen anything obvious online that suggests what may be misconfigured.
    Thanks in advance for any insights.

    I found that Netscape is reporting that the problem is an "Incorrect Message Authentication Code". What else do I need to change beyond replacing the key and certificate? Thanks.

  • WLS (40-bit) to WLS (128 bit) installation

    Hopefully this will help shed some light on the subject.
    Terry
    If you receive the following warning:
    <I> <Security> WARNING: Exportable (weak) WebLogic Server build running and
    domestic (full) strength SSL license detected. Only exportable strength SSL
    connections will be accepted.
    This indicates that you have a full strength certificate but a weak strength
    build of the server. For full strength encryption there is a different WLS
    build. The generally-available (weak/40-bit) version of WLS 5. 1 supports
    512-bit certificates and 40-bit bulk data encryption. The full strength
    (128-bit) WLS 5.1 build supports 768-bit and 1024-bit certificates and
    128-bit bulk data encryption. Your sales contact can provide the required
    forms and a special URL to download the full strength build of WebLogic.
    The installation for the 128-bit version is the same as the installation for
    the 40-bit version. When converting to the 128-bit version a complete
    re-installation is necessary. If you are installing service packs, please
    note that although Service Packs 1-5 are the same for both the 40-bit and
    128-bit versions, SP6 for the 128-bit version is a controlled release. In
    order to obtain SP6 for WLS 5.1 (128-bit), you will need to contact your
    sales representative who will be able to provide a URL where it can be
    downloaded.
    Some other notes concerning the 128-bit installation. First, ensure that
    you are using the permanent license that has been updated with the 128-bit
    key. Second, for information on setting up WLS SSL (i.e. installing
    1024-bit security certificates), please see the documentation at:
    http://www.weblogic.com/docs51/classdocs/API_secure.html.
    It is my understanding that the difference between the 40-bit and 128-bit
    versions of WLS 5.1 is in the encryption/decryption module. Since the
    difference is limited to this particular module, transitioning from the
    40-bit to the 128-bit version should be transparent as far as WLCS (3.1.1
    SP1 & 2.01 SP2) is concerned. This is supported by the fact that there is a
    single version of WLCS for both domestic use and export use.
    A couple of general notes concerning WLCS 3.1.1/2.0.1 installations running
    on top of WLS 5.1 (40-bit or 128-bit) SP6:
    WLCS 3.1.1: To date, support cases have not been received with a WLCS
    3.1.1 installation running on top of WLS
    5.1 (40-bit/128-bit) SP6 where SP6 has been determined to be the
    problem.
    WLCS 2.0.1: With one minor exception (see Solution S-05838 below),
    support cases have not been received with a
    WLCS 2.0.1 installation running on top of WLS 5.1 (40-bit/128-bit) SP6
    where SP6 has been determined to be the
    problem.
    A couple of general notes concerning WLCS 2.01 and WLS 5.01 (40- or 128-bit)
    Service Packs 1-6:
    - There have been problems when using SP1, SP2 and SP3 for WLS 5.
    - Therefore, SP4 (minimum) is required.
    - To date, support cases have not been received where SP5 has been
    determined to be a problem.
    - There is one small issue related to SP6 (see Solution S-05838 below).
    Otherwise, support cases have not been
    received where SP6 has been determined to be a problem.
    - Following the SP6 installation, all the JSPs will need to be
    recompiled. Due to the custom tags used in WLCS 2.0.1,
    the JSPs cannot be pre-compiled. Therefore, recompiling will occur as
    the pages are accessed.
    Please see the release notes that accompany each service pack downloads for
    issues that are resolved with each particular
    service pack.
    Solution S-05838
    A better solution to the problem: WLCS 2.0.1 only: DataLoader script causes
    ASCClientException with WLS 5.1 SP6
    Old Solution:
    Use WLS 5.1 SP5 to run the DataLoader, THEN upgrade to SP6.
    New Solution:
    You can run the DataLoader without exceptions for WLCS 2.0.1 SP2 and WLS 5.1
    SP6 if you modify the script to use t3 socket connections instead of http.
    Open the DataLoader script for editing and change the two appearances of
    "http://" to "t3://".

    You need to contact your sales rep and get the domestic strength version of
    WLS.
    Michael Girdley
    Product Manager, WebLogic Server
    BEA Systems Inc.
    Ravi Kumar.T <[email protected]> wrote in message
    news:8945ju$lu8$[email protected]..
    Where to specify the no of bits for encryption for SSL. Is it depend on
    verisign certificates installed!!
    We are using we weblogic 4.5.1 on Solaris. and my site is having following
    encryption
    SSL 3.0, RC4 with 40 bit encryption (Low); RSA with 512 bit exchange
    and I have seen some other sites are having
    SSL 3.0, RC4 with 128 bit encryption (High); RSA with 1024 bit exchange
    thanks..
    ravi

  • I need firefox to support a 128 bit encryption for a website I need to use for work. How do I accomplish this?

    www.opm.gov/e-qip/ is a government site that I need to use to fill out a questionaire for employment. It says my web browser does not support a 128 bit encryption which it needs for the site to work properly. How do I increase the encryption bits?

    It is a warning that you can ignore.
    <blockquote>Warning - We did not detect that your web browser supports 128-bit high encryption. If you have trouble connecting after you click the "Continue" button below, you will need to upgrade your web browser to a version that supports 128-bit encryption.</blockquote>

  • Does Mozilla support 128-bit encryption?

    To use IRS Business Services Online (http://www.socialsecurity.gov/employer/bsohbnew.htm), 128-bit encryption is needed. They say:
    "To determine whether your browser supports 128-bit encryption, select Help/About from your browser menu. Most browsers will display the phrase ?128-bit encryption? or "128-bit cipher strength.? If you are unsure whether your browser supports 128-bit encryption, contact the software company that developed the browser."
    But I can't seem to find this information on the about page or in online articles about encryption. Would you please help?

    Current Firefox releases can't even go below 128 bit, SSL2 that supported this have been removed quite a few releases now (Firefox 8 dropped support for SSL2).
    *https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/8
    128 bit is the minimum that you can use with Firefox and you can only go higher (e.g. 168 or 256).<br />
    128 bit shouldn't be used these days and servers that only support 128 bit should update their software.
    Firefox supports AES-256 since 2002, so that is already more than 10 years.
    * https://www.fortify.net/sslcheck.html

  • Download to support 128 bit encryption

    since trying to download 4.0 version I cannot open firefox at all and need 128 bit encryption that was available prior to 4.0

    Current Firefox releases can't even go below 128 bit, SSL2 that supported this have been removed quite a few releases now (Firefox 8 dropped support for SSL2).
    *https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/8
    128 bit is the minimum that you can use with Firefox and you can only go higher (e.g. 168 or 256).<br />
    128 bit shouldn't be used these days and servers that only support 128 bit should update their software.
    Firefox supports AES-256 since 2002, so that is already more than 10 years.
    * https://www.fortify.net/sslcheck.html

  • My Ipod Touch won't connect to belkin 54g router with wep password 128 bit

    Well basically, I try to connect to my router it is belkin 54g, I have a 128 bit password WEP security. When I put the password in correctly, it says that it's " Unable to connect ".
    However, when I only put in the first 10 hex of my password it says connected, but when I go on facebook or safari it says " No Internet Connection".
    Before you refer me to any solutions these are some of the things that I have tried but didn't work:
    Putting a $ sign in front of the password
    Restarting my router
    Turning off security and then put back on ( When i turned it off it connected but when I turned it back on it wudnt connect)
    Changing it to WPA (still doesnt work)
    I have noticed that on my router, it keeps blocking me from connecting to it. All of the comptuers can connect to my router as normal however, my ipod touch can't.
    It's really annoying because you can't even do half of the things without being able to connect to internet.
    Please help me

    are other things still connecting to the wifi without a problem?
    Have you tried resetting network settings, then unplugging modem and router from power for 40 seconds then plugging back in letting the lights stabilize and Then recconecting with the ipod>?

  • How to connect Pocket PC to 128 bit WEP protected Airport network

    Friends:
    Can anyone lead me through the steps to connect my Hp iPaq 4155 Pocket PC to my 128 bit WEB protected Airport network?
    Thanks for your help,
    Migs

    Accessing an Airport wireless network from a wifi enabled PocketPC 2003
    http://tech.ifelix.net/2006.html

  • Not able to connect to wireless network using WEP 128 bit hex password

    I'm using a 128 bit hex WEP password on a Belkin wireless router.
    My ascii passphrase is 13 characters.
    I tried using the hex password generated by the Belkin router, as well as the hex equivalent of my ascii passphrase. Every time, I am told that either "there was an error connecting to the network" or the "password is incorrect" message.
    I'm using channel 7, but have also tried with channel 11.
    I tried using a $ sign in front of the WEP hex password. The $ does not work with Open Internet Connect or the Airport menubar.
    I can connect if I don't use any encryption on the wireless network, and also through the Ethernet cable.
    I have an iBook which connects fine to the wireless network.
    So why doesn't the iMac work the same way ?

    The security difference between NO encryption and any form of WEP is about 2 minutes or less for somebody looking to get in... besides having WEP enabled makes you look like an easy target since you think it'll stop anything!
    Either leave it off, making Hackers think at least 3 minutes about WHY, or use/setup WPA of one form or another!

  • Can't connect to 128-bit encrypted network

    I'm trying to use my Airport card to connect to a 128-bit hex encrypted Linksys network. My roommate has a PC laptop and has connected without any problems, but whenever I try to log on, I get a "incorrect password" message. I've selected "WEP 40/128 bit hex", checked the password multiple times, and tried entering both the regular, 26-character password and the password preceded by the "$" hex escape (my computer will only accept the regular password), so I can't figure out what else could be wrong.
    Any thoughts would be appreciated, thanks!

    Any thoughts would be appreciated, thanks!
    One of the problems with WEP is that the actual standard relies on a 10 character HEX key for 40bit WEP and a 26 character HEX key for 128bit WEP.
    In order to make things easier for people, vendors use certain algorithms to convert simple alphanumeric passwords (or passphrases) into HEX keys, thus enabling people to use simple memorable WEP password rather than lengthy HEX keys.
    The problem is that different vendors use different algorithms to generate the HEX key and therefore a ASCII password on an AEBS will be hashed differently on a Netgear client and vice versa.
    One thing is a 13 character 128 bit WEP password will be hashed by all vendors in the same way (if you use 40bit WEP then a 5 character password is required).
    Though sometimes not even that works and the HEX key must be used regardless.
    AirPort: Joining an encrypted wireless network
    http://docs.info.apple.com/article.html?artnum=106424
    Choosing a password for networks that use Wired Equivalent Privacy (WEP)
    http://docs.info.apple.com/article.html?artnum=108058
    iFelix

  • I have a SC-2042-RTD Board and the temperature reading I get are approxiximately 7 degrees high. Every thing is connected as specified in the manual. We are using a 3 wire RTD configuratuion.

    I have a SC-2042-RTD Board and the temperature readings I get are approxiximately 7 degrees high. Every thing is connected as specified in the manual. We are using a 3 wire RTD configuratuion. The current excitation is set at 1mA but is actually 1.0035 mA from the board. The Daq card I am using is a DaqCard-A
    I16XE-50.

    Two quick things to check are: make sure the sensor does not exceed a max resistance of 8.5k ohms and do not leave any current excitation sources unloaded.
    Also, check out chapter five of the SC-2042 user manaul (attached) about how to calibrate the device. This may help get rid of the bad readings.
    Brian
    Attachments:
    SC-2042.pdf ‏166 KB

  • Does firefox browser support 128-bit SSL?

    I am trying to access a bank i work for who just upgraded their system.

    Firefox supports 256 bit since 2002 in Firefox 2, so 128 bit is no problem.
    * https://www.fortify.net/sslcheck.html
    If websites complain about 128 bit encryption not available then that can be caused by the "U;" that is no longer present in the Firefox 4 user agent.
    *http://en.wikipedia.org/wiki/User_agent#Encryption_strength_notations
    You can see the current user agent on the Help > Troubleshooting Information page.
    You can try to add "U;" via variations for the user agent setting like posted below via the pref general.useragent.override to see if that works.
    If you update Firefox then you need to adjust the Gecko (rv:) and Firefox version to reflect the currently installed version.
    Some examples (Vista is 6.0 - Windows 7 is 6.1):
    * Mozilla/5.0 (Windows NT 6.0; U; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
    * Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
    * User Agent Switcher: https://addons.mozilla.org/firefox/addon/59

  • Does Firefox support 128 bit encryption, as required on certain financial sites?

    Some financial sites and credit card sites require 128 bit technology on the browser. Does Firefox use this or will I have to resort to using I.E?

    Firefox supports up to 256 bit encryption.

  • 128-bit floating point numbers on new AMD quad-core Barcelona?

    There's quite a lot of buzz over at Slashdot about the new AMD quad core chips, announced yesterday:
    http://hardware.slashdot.org/article.pl?sid=07/02/10/0554208
    Much of the excitement is over the "new vector math unit referred to as SSE128", which is integrated into each [?!?] core; Tom Yager, of Infoworld, talks about it here:
    Quad-core Opteron? Nope. Barcelona is the completely redesigned x86, and it’s brilliant
    Now here's my question - does anyone know what the inputs and the outputs of this coprocessor look like? Can it perform arithmetic [or, God forbid, trigonometric] operations [in hardware] on 128-bit quad precision floats? And, if so, will LabVIEW be adding support for it? [Compare here versus here.]
    I found a little bit of marketing-speak blather at AMD about "SSE 128" in this old PDF Powerpoint-ish presentation, from June of 2006:
    http://www.amd.com/us-en/assets/content_type/DownloadableAssets/PhilHesterAMDAnalystDayV2.pdf
    WARNING: PDF DOCUMENT
    Page 13: "Dual 128-bit SSE dataflow, Dual 128-bit loads per cycle"
    Page 14: "128-bit SSE and 128-bit Loads, 128b FADD, 128 bit FMUL, 128b SSE, 128b SSE"
    etc etc etc
    While it's largely just gibberish to me, "FADD" looks like what might be a "floating point adder", and "FMUL" could be a "floating point multiplier", and God forbid that the two "SSE" units might be capable of computing some 128-bit cosines. But I don't know whether that old paper is even applicable to the chip that was released yesterday, and I'm just guessing as to what these things might mean anyway.
    Other than that, though, AMD's main website is strangely quiet about the Barcelona announcement. [Memo to AMD marketing - if you've just released the greatest thing since sliced bread, then you need to publicize the fact that you've just released the greatest thing since sliced bread...]

    I posted a query over at the AMD forums, and here's what I was told.
    I had hoped that e.g. "128b FADD" would be able to do something like the following:
    /* "quad" is a hypothetical 128-bit quad precision  */
    /* floating point number, similar to "long double"  */
    /* in recent versions of C++:                       */
    quad x, y, z;
    x = 1.000000000000000000000000000001;
    y = 1.000000000000000000000000000001;
    /* the hope was that "128b FADD" could perform the  */
    /* following 128-bit addition in hardware:          */
    z = x + y;
    However, the answer I'm getting is that "128b FADD" is just a set of two 64-bit adders running in parallel, which are capable of adding two vectors of 64-bit doubles more or less simultaneously:
    double x[2], y[2], z[2];
    x[0] = 1.000000000000000000000000000001;
    y[0] = 1.000000000000000000000000000001;
    x[1] = 2.000000000000000000000000000222;
    y[1] = 2.000000000000000000000000000222;
    /* Apparently the coordinates of the two "vectors" x & y       */
    /* can be sent to "128b FADD" in parallel, and the following   */
    /* two summations can be computed more or less simultaneously: */
    z[0] = x[0] + y[0];
    z[1] = x[1] + y[1];
    Thus e.g. "128b FADD", working in concert with "128b FMUL", will be able to [more or less] halve the amount of time it takes to compute a dot product of vectors whose coordinates are 64-bit doubles.
    So this "128-bit" circuitry is great if you're doing lots of linear algebra with 64-bit doubles, but it doesn't appear to offer anything in the way of greater precision for people who are interested in precision-sensitive calculations.
    By the way, if you're at all interested in questions of precision sensitivity & round-off error, I'd highly recommend Prof Kahan's page at Cal-Berzerkeley:
    http://www.cs.berkeley.edu/~wkahan/
    PDF DOCUMENT: How JAVA's Floating-Point Hurts Everyone Everywhere
    http://www.cs.berkeley.edu/~wkahan/JAVAhurt.pdf
    PDF DOCUMENT: Matlab's Loss is Nobody's Gain
    http://www.cs.berkeley.edu/~wkahan/MxMulEps.pdf

Maybe you are looking for