Primo It wrote: > First sorry for my english, i don`t do speak so good. > I hope you can understand what i say below. > > I want to say by "personal" not accurately certificates for which I have > (private) key, but final certificates that are not CA cert neither OCSP > responder.
You're asking about "End Entity" (EE) certificates. NSS offers C/C++ methods to get them but you're looking for a Java (JSS) method to find them. Right? I do hope our JSS expert will speak up here pretty soon. I just can't answer JSS questions. But there may be alternative solutions for you to consider. > I want to do it because when i crypt a file, in most cases i very probably > don`t do it to an CA. (why i would want do cryptographa file to a CA?) > so why i would show this certificates (CA and OCSP responder) to the user > choose. So you want to present the local user with a list of certs for other users so that the local user can choose the potential recipients of the encrypted file from that list. Right? Once you've encrypted the file, how are you going to send it to the recipients? By email? You could address the email, and let the program find the certificates for the email recipients by their email addresses. Does that sound promising? (Hint, this is already built into mozilla/Thunderbird email). /Nelson _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
