Si quieres hacerlo para mozilla/firefox debes hacer un componente que
utilice directamente la NSS y no las Interfaces que proporciona por
XPCOM mozilla. Creo que con estas interfaces públicas sólo se puede
conseguir una firma CMS. Si no has encontrado ningún plugin que lo haga,
defíneme como debería ser la función que necesitas. Estoy pensando en
recuperar el modulo secclab para firefox 2.
Saludos
Luis
j.fabre escribió:
Hi Anders,
First of all, I must thank you for your "more than quick" answer, and
then I will explain you my concrete situation:
I´m trying to convert the signature produced by crypto.signtext() to XML
format at the server-side. In order to achieve this, I need a "clean"
detached signature, without any kind of "extra" date attributes. I think
that only in this way I could map the signature produced by
crypto.signtext() to an XML signature.
I think that the most appropiate option would be to implement a
"non-java" plugin that accesses to Firefox´s credential store. But I
don´t know certainly if this option is feasible.
Could you help me to solve this subject ?
Thanks a lot man.
Jesús el tuty.
Anders Rundgren escribió:
Hi J,
Your only option is to try a proprietary signature plugin.
There are many, most of them are in the form of Java applets.
Some are free, including open source, some are licensed.
Personally I think that you should try to live with the
client-side time-stamp because it adds some evidence to
the on-line transaction. Commercial signature plugins
AFAIK, almost always insert time-stamps and often
other things as well, like the URI of the requester.
A signature without any environmental attributes (context)
seems a bit "naked" in my opinion.
Anders Rundgren
----- Original Message -----
From: "j.fabre" <[EMAIL PROTECTED]>
To: <dev-tech-crypto@lists.mozilla.org>
Sent: Tuesday, December 05, 2006 19:15
Subject: Problem with crypto.Signtext and A PKCS #9 signing time
attribute
Hi all,
I´m looking for a signing tool which allows me to sign a text in Mozilla
Firefox (now I´m using version 2.0 of this browser). I found
crypto.Signtext function, but this tool adds a PKCS#9 signing time
attribute that I want to avoid.
¿Anyone knows how I could sign text, forms, etc from Firefox 2.0 without
any kind of extra attribute in the final signature?
Any help will be appreciated.
Thanks in advance.
PD1: I have tried with secclab extension, but it doesn´t install
properly in Firefox 2.0
PD2: ¿It would be posible to create a "custom Signtext" function which
doesn´t include this time attribute?
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
