getting cred(pkcs12) out of mozilla?

2007-03-27 Thread Jana Nguyen
Hi, I'm trying to export a credential (PKCS#12) out of firefox mozilla browser. Are there api or applications that I can use to do this without having to manually export it out of the browser? I believe there is something called a pk12util that allows me to export my credential from mozilla out

PK11_Verify vs. VFY_VerifyDigest

2007-03-27 Thread Peter Djalaliev
Hello, When I had a problem with verifying a RSA signtaure, I was hinted by Bob Releya that the VFY_* functions are better to use than PK11_Verify when trying to verify a signature given the digest of what was actually signed. I was intrigued by that (it helped solve a related problem I had), so

Re: Implementing XML-based security protocols in Firefox

2007-03-27 Thread Anders Rundgren
Thanx Peter, It seems that I will get some problems with this since the described work builds heavily on the use of XML schemas which does not seem to be supported in Mozilla. A workaround would be using Java but then JRE would be a requirement. Anders - Original Message - From: "Peter

Re: Implementing XML-based security protocols in Firefox

2007-03-27 Thread Peter Djalaliev
Sure Anders, Here is an additional piece of documentation: http://www.xulplanet.com/references/xpcomref/group_XMLSchema.html The implementation of this interface is in nsSchema: http://lxr.mozilla.org/mozilla1.7/source/extensions/webservices/schema/src/nsSchema.cpp Apparently, Mozilla has interf

Not able to Import a PKCS#7 cert chain into Firefox 2.0

2007-03-27 Thread mckenna_vc
Browser: Firefox 2.0.0.3 OS: Windows Server 2003 Here the problem is installing End user certificate into the firefox browser without the root CA , Certificate Chain of user certificate is not getting installed into the Certificate Manager of the Firefox Browser. The end user certificate's chain

Re: Subtracting trust anchors

2007-03-27 Thread Paul Hoffman
At 1:15 AM -0700 3/27/07, Nelson B wrote: >Here's a suggestion for the participants in this thread. >Instead of all this conjecture, imagining various bad designs for NSS and >then criticizing them, try to figure out how the products *really* work. Did that and failed. It may be my stupidity, or i

Re: Subtracting trust anchors

2007-03-27 Thread Nelson B
Here's a suggestion for the participants in this thread. Instead of all this conjecture, imagining various bad designs for NSS and then criticizing them, try to figure out how the products *really* work. There are major clues in Certificate Manager. Here are some hints. 1. The root CA list that c