mckenna_vc wrote: > Browser: Firefox 2.0.0.3 > OS: Windows Server 2003 > > Here the problem is installing End user certificate into the firefox browser > without the root CA , Certificate Chain of user certificate is not getting > installed into the Certificate Manager of the Firefox Browser. > The end user certificate's chain is .... root ca-s1-s2-end user certificate. > root CA's is not installed in browser.s1 is also is not installed . Issuer > CA 's2' alone is trusted with the firefox browser.
You wrote "is trusted", but do you really mean trusted? or do you mean merely "is imported"? FireFox believes the chain starts with the EE cert, and includes any certs up to (and including) the first trusted cert in the chain. So If S2 really is trusted, then (as far as FireFox is concerned, the chain only includes s2 and the EE cert. > We generated Certificate Chain and tried to install the PKCS#7 cert chain > into firefox with both type of extensions "application/x-x509-user-cert ", > "application/x-x509-cert-chain". See http://wp.netscape.com/eng/security/comm4-cert-download.html#chains for the list of supported MIME content types for downloading certs. Also, notice what that page says about the ORDER of the certs in the chain. > In either cases after installing user > certificate into browser, certificate chain is not getting installed into > the browser. But if you view the Certificate with Windows Cert Viewer or > OpenSSL tool Certificate Chain is showing porperly. But in Firefox we are > not able to see the Certificate Chain. > > Could any one help me to install Certificate Chain into the FIREFOX browser > successfully. > Thanks in adavance for Quick replies. _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
