Re: Inclusion of VeriSign EV root in Firefox 3 betas for testing

2007-11-09 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > I'd like to make some of you aware of the latest entry by Rick from > Verisign of the bug 402947. Rick writes, that their EV audit is under > way...meaning that Verisign hasn't finished the process of the first > audit yet. This might give us an indication abou

Re: Updating Mozilla CA certificate policy to address EV certificates

2007-11-09 Thread Frank Hecker
Frank Hecker wrote: > OK, absent any objections my plan is to go ahead and commit this change > later today or tomorrow. Done. The 1.1 release of the Mozilla CA certificate policy is now live at the standard URL: http://www.mozilla.org/projects/security/certs/policy/ Thanks to Eddy, Gerv, a

Re: Inclusion of VeriSign EV root in Firefox 3 betas for testing

2007-11-09 Thread Eddy Nigg (StartCom Ltd.)
Maybe Nelson or somebody else can explain us the flow and requirements briefly? Frank Hecker wrote: > Eddy Nigg (StartCom Ltd.) wrote: > >> Michael Ströder wrote: >> >>> Who decided and why that EV meta data can only be added to trust anchors? >>> >>> >> This is actually a valid

Re: Inclusion of VeriSign EV root in Firefox 3 betas for testing

2007-11-09 Thread Eddy Nigg (StartCom Ltd.)
Nelson B Bolyard wrote: > I think we should be absolutely consistent with regard to this aspect of > the policy. If we decide, now, that we ARE willing to accept requests > from third parties, then I think we should go back to the recently > rejected requests (in bugzilla) and reopen them and reco

Re: firefox pkcs storage access from java

2007-11-09 Thread Diego Zanga
2007/11/9, Glen Beasley <[EMAIL PROTECTED]>: > Diego Zanga wrote: > > Lo > > > > is there a guide or a complete howto to connect > > pkcs storage of firefox from java? > > > no, but if anybody has time to write one, please do! thank you for the informations, if i can make it working, i'll try to m

Re: firefox pkcs storage access from java

2007-11-09 Thread Glen Beasley
Diego Zanga wrote: > Lo > > is there a guide or a complete howto to connect > pkcs storage of firefox from java? > no, but if anybody has time to write one, please do! many people have managed to do this by combining information from various existing documentation on applets and JSS. http://

Re: signed jar

2007-11-09 Thread Glen Beasley
Abraham wrote: > Hi, > > I've downloaded the jss latest version (.jar 4.2.5, windows), but the sign > appears as caduced (older version too). Is this so? > I'm not quite sure what "caduced" means but I think you're stating that if you run "jarsigner -verify jss4.jar" you get: jar verified. Wa

firefox pkcs storage access from java

2007-11-09 Thread Diego Zanga
Lo is there a guide or a complete howto to connect pkcs storage of firefox from java? i've seen some example from this list, however it seems none works. (with firefox 2.0 and java 1.6 on windows xp) [this obviusly means i'm not setting all things right] is there a "basic" guide or some

Re: CERT_FindUserCertByUsage() in certhigh returns wrong certificate

2007-11-09 Thread Angelo Rosenfelder
Nelson Bolyard wrote: > Here's the problem, Angelo, > > While using CKA_Label as you imagine might seem to be a solution, it > really places onto the user the responsibility to know which cert is > correct to use in any given situation. NSS's approach is to let the > user specify the relevant sel

signed jar

2007-11-09 Thread Abraham
Hi, I've downloaded the jss latest version (.jar 4.2.5, windows), but the sign appears as caduced (older version too). Is this so? Regards, Abraham. ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/d