On 01/21/2009 10:30 PM, Nelson B Bolyard:
It would be useful to know the complete contents of any key usage and
extended key usage extensions present.

That would have been:

Key Usage: Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment Extended Key Usage: TLS Web Client Authentication, E-mail Protection, Microsoft Smartcardlogin, Microsoft Encrypted File System, 1.3.6.1.4.1.311.10.3.4.1


Also the CA certificates must be imported into your profile for this to
work and have the correct trust bits set.

I don't find that to be generally true.
Trust bits, yes, but imported into the profile? no.


Well, you can't sign mail if the intermediate CAs are missing. (Remember that NSS doesn't fetch them for us :S )

--
Regards

Signer: Eddy Nigg, StartCom Ltd.
Jabber: start...@startcom.org
Blog:   https://blog.startcom.org
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to