Re: Sorting through EV root CA requests

2008-01-21 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > Well, you said: "If anyone wants to double-check my conclusions above > please feel free; I could use some help with this." > > So I asked in reply what the time frame is...as *you* know, it takes > quite some time to go through just the basic informations, ver

Re: Generation of key pair and CSR

2008-01-21 Thread Nelson Bolyard
[EMAIL PROTECTED] wrote, On 2008-01-21 19:59: > I need to know how to generate key pair and correspondingly prepare a > CSR in PKCS#10 format using NSS. Does the tag do what you want? ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org

Generation of key pair and CSR

2008-01-21 Thread arungenesis
Hello people, I need to know how to generate key pair and correspondingly prepare a CSR in PKCS#10 format using NSS. I want to develop the same as a component in firefox. the crypto objects inf firefox helps us to generate the CRMF request..all that is fine.but I need it in PKCS#10 forma

Re: Handshake Exception with Firefox and Jetty Servlet Container

2008-01-21 Thread Nelson Bolyard
skleinei wrote, On 2008-01-17 09:44: > [...] Here are the basics: > > First of all, I am using version 2.0.0.11. The following parameters > might be of interest:security.enable_ssl2=false, > security.enable_ssl3=true, security.enable_tls=true > The error I am getting after a few clicks or reloads

Re: Sorting through EV root CA requests

2008-01-21 Thread Eddy Nigg (StartCom Ltd.)
Frank Hecker wrote: > Eddy Nigg (StartCom Ltd.) wrote: > >> What's the time frame for this? >> > > Time frame for what? I plan to work intensively on EV requests this > week, and get as many as I can on the path to approval as soon as I can. OK > > So if you have comments, either gen

Re: Sorting through EV root CA requests

2008-01-21 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > What's the time frame for this? Time frame for what? I plan to work intensively on EV requests this week, and get as many as I can on the path to approval as soon as I can. So if you have comments, either general or on any of the specific requests, please

Re: Sorting through EV root CA requests

2008-01-21 Thread Eddy Nigg (StartCom Ltd.)
What's the time frame for this? I've seen already a few things worth commenting, but thought after your first message to follow up on it after you are ready... Frank Hecker wrote: > Frank Hecker wrote: > >> The first step is getting a complete list of all >> current EV-related CA requests. I

Re: WISeKey root CA certificate inclusion request

2008-01-21 Thread Eddy Nigg (StartCom Ltd.)
Frank Hecker wrote: > Eddy Nigg (StartCom Ltd.) wrote: > >> Concerning this request I'd like to know a little bit more about the >> physical protection requirements of the current and future sub CAs >> according to what was stated at the bug. I've been reading the >> information (and document

Re: KISA root CA certificate inclusion request

2008-01-21 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > As per your comment 61 > https://bugzilla.mozilla.org/show_bug.cgi?id=335197#c61 how did you > establish the audit performed by the Korean Ministry of Information and > Communication to be equivalent to the Webtrust (assuming AICPA) > criteria? This was state

Re: WISeKey root CA certificate inclusion request

2008-01-21 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > Concerning this request I'd like to know a little bit more about the > physical protection requirements of the current and future sub CAs > according to what was stated at the bug. I've been reading the > information (and documents) mentioned in comment 12 > h

Re: Sorting through EV root CA requests

2008-01-21 Thread Frank Hecker
Frank Hecker wrote: > The first step is getting a complete list of all > current EV-related CA requests. I believe the following is the complete > list, based on searching bugzilla: Here's a quick take on each request. The principal parameters I looked for are as follows: * Is this request for

Re: WISeKey root CA certificate inclusion request

2008-01-21 Thread Eddy Nigg (StartCom Ltd.)
Hi Frank, Concerning this request I'd like to know a little bit more about the physical protection requirements of the current and future sub CAs according to what was stated at the bug. I've been reading the information (and documents) mentioned in comment 12 https://bugzilla.mozilla.org/show

Re: KISA root CA certificate inclusion request

2008-01-21 Thread Eddy Nigg (StartCom Ltd.)
Hi Frank, Having had a look at this request last summer and followed the entries of Gerv I wanted to ask you some quick question before investing more time on this... As per your comment 61 https://bugzilla.mozilla.org/show_bug.cgi?id=335197#c61 how did you establish the audit performed by th

Sorting through EV root CA requests

2008-01-21 Thread Frank Hecker
I've been very remiss in sorting through the various CA requests to have their roots enabled for EV use (or to add new EV-enabled roots), for which I apologize. I'm now pushing to work through these requests as soon as possible. The first step is getting a complete list of all current EV-relate