Re: Announcement: Firefox Extension for Key Generation and CertificateEnrollment

2007-03-30 Thread Kyle Hamilton
Not XER? -Kyle H On 3/30/07, Anders Rundgren <[EMAIL PROTECTED]> wrote: > Hi Subrata, > > Although I find your extension interesting, I think that the on-line stuff > is nowhere ready. KeyGen, generateCRMFrequest, and Xenroll have > severe limitations which have made most large PKIs in the EU us

Re: Announcement: Firefox Extension for Key Generation and CertificateEnrollment

2007-03-30 Thread Anders Rundgren
Hi Subrata, Although I find your extension interesting, I think that the on-line stuff is nowhere ready. KeyGen, generateCRMFrequest, and Xenroll have severe limitations which have made most large PKIs in the EU use home-brewed PKI provisioning solutions. I am trying to create a standard for thi

Re: dev-tech-crypto Digest, Vol 15, Issue 28

2007-03-30 Thread Peter Djalaliev
> > Subject: Email certificate from TPM does not show up in Thunderbird > > (or My shy certificate revisited) > > From:"Stephen Gryphon" <[EMAIL PROTECTED]> > > Date:Fri, 30 Mar 2007 11:00:13 +1000 > > To: > > > > G?day, > > > > I am suffering from what appears to be the same

Re: dev-tech-crypto Digest, Vol 15, Issue 28

2007-03-30 Thread Peter Djalaliev
Funnily enough, one of the other applications that Infineon list as supporting their product is ... Netscape Communicator! http://www.infineon.com/cgi-bin/ifx/portal/ep/channelView.do?channelId=-84614&channelPage=%2Fep%2Fchannel%2FproductOverview.jsp&pageTypeId=17099 Regards, Peter _

Re: dev-tech-crypto Digest, Vol 15, Issue 28

2007-03-30 Thread Peter Djalaliev
The subject of this ought to have been Re: Email certificate from TPM does not show up in Thunderbird ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Turning on OCSP verification generates many errors

2007-03-30 Thread Nelson Bolyard
Bill Burns wrote: > On Mar 29, 8:26 pm, Nelson Bolyard <[EMAIL PROTECTED]> > wrote: > > >>> One error I get while attempting to authenticate to an internal site >>> with my certificate-on-a-smartcard is this one: >>> "Alert: An internal failure has been detected. It not possible to >>> complete

Re: Not able to Import a PKCS#7 cert chain into Firefox 2.0

2007-03-30 Thread Nelson Bolyard
mckenna_vc wrote: > Browser: Firefox 2.0.0.3 > OS: Windows Server 2003 > > Here the problem is installing End user certificate into the firefox browser > without the root CA , Certificate Chain of user certificate is not getting > installed into the Certificate Manager of the Firefox Browser. > T

Re: Announcement: Firefox Extension for Key Generation and Certificate Enrollment

2007-03-30 Thread Kyle Hamilton
Why is the binary code not available as source so that those of us who are on Macs can actually compile it? Is this intended to be proprietary? -Kyle H On 3/30/07, Subrata Mazumdar <[EMAIL PROTECTED]> wrote: > Here is a follow-up to the original message: > - I forgot tomention, the "KeyManager

Re: Turning on OCSP verification generates many errors

2007-03-30 Thread Bill Burns
On Mar 29, 8:26 pm, Nelson Bolyard <[EMAIL PROTECTED]> wrote: > > One error I get while attempting to authenticate to an internal site > > with my certificate-on-a-smartcard is this one: > > "Alert: An internal failure has been detected. It not possible to > > complete the requested OCSP operati

Re: Unbelievable behavior from Mozilla browser for User Identification

2007-03-30 Thread Nelson Bolyard
mckenna_vc wrote: > Nelson Bolyard wrote: >> mckenna_vc wrote: >>> Browser: Mozilla 1.7 >>> OS : Sun Solaris 10 >>> >>> I cant believe this User Identification request Dialog is prompting many >>> times, around 20 times evnthough you give the valid certificate. >> >> Cool! A new record! >> >>> If

Re: Announcement: Firefox Extension for Key Generation and Certificate Enrollment

2007-03-30 Thread Nelson Bolyard
Subrata Mazumdar wrote: > Here is a follow-up to the original message: > - I forgot tomention, the "KeyManager" extension only works on Windows > and Linux. >If there is interest, I may be able to create a version for SUN-Solaris. > - addson.mozilla.org changed their policy - the extension is

Email certificate from TPM does not show up in Thunderbird

2007-03-30 Thread Nelson Bolyard
[Moderator's note: The message below was sent in html. Its size was too big (due to all the html overhead) and so it was trapped by the moderation software. I converted it to plain text to send it. Please post messages only in plain text and not html. There is a 40KB size limit. Thanks.] > Su

Re: PK11_Verify vs. VFY_VerifyDigest

2007-03-30 Thread Robert Relyea
Peter Djalaliev wrote: > Can somebody elaborate a little more about why one is better then the > other? > > I went to the VFY_VerifyDigest code and I saw in vfy_VerifyDigest > that: > > - for signatures produced with the RSA encryption algorithm, it would > decrypt the signature using the public k

Re: Announcement: Firefox Extension for Key Generation and Certificate Enrollment

2007-03-30 Thread Subrata Mazumdar
Here is a follow-up to the original message: - I forgot tomention, the "KeyManager" extension only works on Windows and Linux. If there is interest, I may be able to create a version for SUN-Solaris. - addson.mozilla.org changed their policy - the extension is now publicly available. You