There are no certificates revoked in either the ComsignCA.crl or
ComsignSecuredCA.crl.  I do not know if this would be the cause of the
ffffe009 error.

-Kyle H

On Wed, Feb 25, 2009 at 2:56 AM,  <stefan.claes...@gmail.com> wrote:
> On Feb 24, 10:42 pm, Frank Hecker <hec...@mozillafoundation.org>
> wrote:
>> Kathleen Wilson wrote:
>> > As per the CA Schedule athttps://wiki.mozilla.org/CA:ScheduleComSign
>> > is the next request in the queue for public discussion.
>>
>> Thanks for preparing this for public discussion!
>>
>> > * CRL issue: Current CRLs result in the ffffe009 error code when
>> > downloading into Firefox. ComSign has removed the critical flag from
>> > the CRL, and the new CRLs will be generated in April.
>>
>> Do we know for sure that the problem was due to the CIDP extension? Your
>> comments in the bug imply that, but I don't see a definitive answer from
>> Comsign on this point.
>>
>> If Comsign is using CIDP, are they doing partitioned CRLs like Hongkong
>> Post? Or is the CRL a full CRL?
>>
>> Frank
>>
>> --
>> Frank Hecker
>> hec...@mozillafoundation.org
>
> Hi,
>
> I am Stefan from ComSign.
>
> Someone from ComSign told Kathleen that we removed the
> critical flag but obviously this was a misunderstanding since we dont
> use the CIDP in our Crl`s
>
> Here are the CDP`s for the CA crl`s.
>
> http://fedir.comsign.co.il/crl/ComSignCA.crl
> http://fedir.comsign.co.il/crl/ComSignSecuredCA.crl
>
> Is CIDP required to use in a crl?
>
> Stefan
> --
> dev-tech-crypto mailing list
> dev-tech-crypto@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-tech-crypto
>
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to