What am I missing here? I have 1 1

[tina2]

What am I missing here?

I have 128 bit encryption on my server.
I would like to display a frindly instruction page for users who need to upgrade thier encryption in order to use my system.

I found the following code in an old post on the Macromedia forums:

<cfif (cgi.https_keysize GTE 128)>
<cfoutput>
browser is good
Https= #cgi.https#<br>
Keysize = #cgi.https_keysize#<br>
Secret KeySize = #cgi.https_secretkeysize#<br>
HTTP_USER_AGENT = #HTTP_USER_AGENT#<br>


</cfoutput>
<cfelse>
<cfoutput>
Prompt to download the updated encryption patch
Https= #cgi.https#<br>
Keysize = #cgi.https_keysize#<br>
Secret KeySize = #cgi.https_secretkeysize#<br>
HTTP_USER_AGENT = #HTTP_USER_AGENT#<br>

</cfoutput>
<cfabort>
</cfif>

The problem is if I put the detection page outside of the https site, it throws the error on a browser that does have 128 bit encryption because https is off.

If I put it inside the https site, the browser that has less than 128 gets a page cannot be displayed error because it cannot handle 128 bit encryption........

Can anybody help?

Kristine

 

[tleish]

I only know of a way to do it in Netscape, I'm not aware of a way to do it in IE outside of an ssl connection. - tleish

 

[SidianConsulting]

Kristine,

There is no foolproof way to detect the encryption level, and the varitey of browsers would make it a nightmare, since they are always changing.

One way to fix this problem, however, is to edit the Custom Errors for your web site (if running IIS). The http error you are specifically looking for is &quot;403.5&quot;. You could point this error to a cfm template or to an htm that meta refreshes the page to wherever you want it to go. This way you are using IIS to determine if 128-bit encryption exists. Doing it this way, you will ALWAYS know that 128-bit encryption does not exist, therefore you can serve up whatever pretty error page you want!

HTH,

-Tek

 

[tina2]

Thanks Tek!
I am running IIS. I'll give it a try.
Kristine

 

[tina2]

Hey tek,
I am still having problems with this...
I changed the template path for error 403.5 to point to my .cfm template, but when I tested it out again, I discovered that the error message is not coming from the template set up in IIS. (I switched them around but got the same message every time)

It is a generic message and I am unable to determine the path. But the title is &quot;cannot find server&quot; and the description says &quot;you may need to adjust your browser settings...&quot;

The annoying thing is that it does not give an error number or anything.

It seems like there must be something about the way I have IIS set up

Any ideas anyone?

Kristine