Friendly reminder from the moderator

2007-08-24 Thread Nelson Bolyard
Dear readers of dev-tech-crypto mailing list: dev-tech-crypto is a members-only mailing list. Messages are automatically accepted only from the email addresses of list subscribers. Any postings you make to this list must be made from the email address that you subscribed to the list. Postings f

Re: Testing DSA ciphersuites..

2007-08-24 Thread Steffen Schulz
On 070824 at 03:20, Wan-Teh Chang wrote: > > Is usage of DSA-suites disencouraged? How can I test them? > No, the use of DSA ciphersuites is not discouraged. But we haven't > implemented DSA ciphersuites on the server side. They are only > implemented on the client side. I believe this is the pr

RE: automate mozilla certificate install

2007-08-24 Thread Brian Meahan
by automate, when a user logs in to our portal, their is a javascript function that runs an embeded windows control which does a database hit to verify that they have a valid certificate stored on our server. if so then it installs the user cert into the windows personal cert store. when the u

Re: automate mozilla certificate install

2007-08-24 Thread Eddy Nigg (StartCom Ltd.)
Hi Brian, Brian Meahan wrote: > if so then it installs the user cert into the windows personal cert > store. This would be possible by installing a client certificate as discussed previously. Does the client have a private key for it? Otherwise you might offer a download of a pfx file? > wh

Re: automate mozilla certificate install

2007-08-24 Thread Eddy Nigg (StartCom Ltd.)
Nelson Bolyard wrote: > However, IIRC, with either method of generating the certificate request, > after the CA subsequently issues the user's email cert, the user will > need to download/install the certificate. AFAIK, the only way, presently > supported in mozilla browsers, to do that download o

Re: automate mozilla certificate install

2007-08-24 Thread Nelson Bolyard
Eddy Nigg (StartCom Ltd.) wrote: > Nelson B wrote: >> casprd wrote: >> >>> we currently have a process which uses and embedded windows control >>> and the .net security libraries to automate the installation of the >>> client x.509 certificate into the windows store. >>> >>> I had run across some

Re: automate mozilla certificate install

2007-08-24 Thread Eddy Nigg (StartCom Ltd.)
Nelson B wrote: > casprd wrote: > >> we currently have a process which uses and embedded windows control >> and the .net security libraries to automate the installation of the >> client x.509 certificate into the windows store. >> >> I had run across some code snippets for doing this in firefox

Re: Testing DSA ciphersuites..

2007-08-24 Thread Nelson B
Wan-Teh Chang wrote: > On 8/23/07, Steffen Schulz <[EMAIL PROTECTED]> wrote: >> Hi, >> >> I want to test DSA ciphersuites, but 'server' and 'selfsrv' seem to be >> unable to handle them. >> >> I changed the source to enable some TLS-DSA suites but it seems >> the ssl library is not being supplied w

Re: automate mozilla certificate install

2007-08-24 Thread Nelson B
casprd wrote: > we currently have a process which uses and embedded windows control > and the .net security libraries to automate the installation of the > client x.509 certificate into the windows store. > > I had run across some code snippets for doing this in firefox but now > for the life of m

Re: automate mozilla certificate install

2007-08-24 Thread Eddy Nigg (StartCom Ltd.)
casprd wrote: > we currently have a process which uses and embedded windows control > and the .net security libraries to automate the installation of the > client x.509 certificate into the windows store. > > I had run across some code snippets for doing this in firefox but now > for the life of me

automate mozilla certificate install

2007-08-24 Thread casprd
we currently have a process which uses and embedded windows control and the .net security libraries to automate the installation of the client x.509 certificate into the windows store. I had run across some code snippets for doing this in firefox but now for the life of me i can't find the website

Re: Testing DSA ciphersuites..

2007-08-24 Thread Steffen Schulz
On 070824 at 16:47, Wan-Teh Chang wrote: > On 8/24/07, Steffen Schulz <[EMAIL PROTECTED]> wrote: > Yes, most of the missing code is in the SSL library. There is a > work-in-progress patch in the bug report for this feature: > https://bugzilla.mozilla.org/show_bug.cgi?id=102794 I see. No, I'm cu

Re: Testing DSA ciphersuites..

2007-08-24 Thread Wan-Teh Chang
On 8/24/07, Steffen Schulz <[EMAIL PROTECTED]> wrote: > > Okay. How much is missing to use DSA-suites in the 'server' sample > program? The calls to look up the certificate and supply it to ssl look > rather generic. OTOH, the server signing routines in the ssl library > seem to be missing.. Yes,

Re: Testing DSA ciphersuites..

2007-08-24 Thread Steffen Schulz
On 070824 at 03:20, Wan-Teh Chang wrote: > > Is usage of DSA-suites disencouraged? How can I test them? > No, the use of DSA ciphersuites is not discouraged. But we haven't > implemented DSA ciphersuites on the server side. They are only > implemented on the client side. I believe this is the pr