Hi,
I´ve solved this problems in two ways, both using Java Applets:
1º- Creating an applet that uses JSS (Network Security Services for
Java) to use keys and certificates stored on Mozilla Firefox´s certs store.
2º- Creating an applet which uses Sun PKCS#11 provider to access data
stored on a smart card associated to a custom PKCS#11 (certs and keys)
and build a PKCS#7 signature using BouncyCastle libraries.
Regards.
Jesús el tuty.
Henrik Niklaus wrote:
Hello J. Fabre,
at the moment I have got the same problem as you had in your post to
the dev-tech-crypto mailing list.
Have you gotten ahead on this topic?
I am trying to sign arbitrary text from within a firefox extension
based on a private X.509 certificate of the user. Furthermore I try to
verify signed text with a certificate.
For now I am a bit lost and I thought that maybe you could have a tip
for me?
Thank you very much in advance,
Henrik Niklaus
Hi all,
I unforunately tried to find a solution to achieve PKCS#7 or CMS
signature generation from Firefox, to a later XML-Signature conversion.
I?ve analyzed several possible solutions:
1- Using crypto.signText() function: This function introduces
additional attributes into the PKCS#7 signature and doesn?t allow a
proper conversion to a signature XML DSig standard compliant. 2-
Using the secclab plugin to generate a CMS signature of a HTML form.
I haven?t got any way to execute it, since when I install the plugin
in Mozilla 1.5 or Netscape 7.0, the browser shows me a notification
dialog indicating that installation is complete. But then I can see
the plugin listed at the browser installed plugins list.
I?m thinking about a possible answer to my problem, but I can only
think about making a new plugin to generate CMS or PKCS#7 signatures,
something like an updated version of Secclab. ¿Somebody could tell me
the reason why secclab plugin development closed in 2003? ¿Do you
think that it?s a reasonable idea, in time and effort terms, to build
a plugin of this nature (specially taking into account that I?m a
basic C++/advanced C programmer?
Thanks for you attencion.
Regrets.
Jesús el tuty.
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
