Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Nelson Bolyard
Nukeador wrote, On 2008-05-21 14:59: > Eddy Nigg (StartCom Ltd.) escribió: >> Apparently yes! From >> http://wiki.mozilla.org/CA:Root_Certificate_Requests see the lower >> section. I suggest that the representative of the CA starts a new bug >> according to the instructions of this page: > Ok, I'm

Re: Command to import a pkcs12 certificate to the cert.db in a mozilla profile in Linux(RHEL or SLED)

2008-05-21 Thread Nelson Bolyard
Sujith wrote, On 2008-05-18 23:55: > Is there a command to import a pkcs12 certificate to a mozilla profile > in Linux(RHEL or SLED)? Yes, the command is pk12util. When you run it, you must be CERTAIN that the db files in your mozilla profile are not in use by any mozilla product. In other words,

Re: Deutsche Telekom Root CA 2 inclusion into Firefox 3

2008-05-21 Thread Nelson Bolyard
rainer_k wrote, On 2008-05-18 08:57: > Since several months a lot of people from German Universities and > research institutes are waiting for inclusion of "Deutsche Telekom Root > CA 2" into the Firefox built-in root certificates. Today I downloaded FF3 > RC1 and was disappointed by not finding i

Re: Elliptic Curve Key Generation Parameter Names for Standard Curves in JSS

2008-05-21 Thread Glen Beasley
Bill Price wrote: > Based on the LXR examples on the JSS test page I appear to be able to > generate Elliptic Curve Pairs. The examples show generation of keys of > various length. However, I would like to generate key pairs using the > standard curves recognized by NIST or included in Suite B. The

Re: verifying peer identity during handshake

2008-05-21 Thread Nelson B Bolyard
Rainer Gerhards wrote, >>> [snip] I would like to authenticate >>> remote peers via custom authentication layed out in the standard. This >>> is fingerprint-based, very similar to SSHs leap of faith auth. "Leap of faith auth". That's the perfect name of SSH's authentication. Did you coin that p

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Eddy Nigg (StartCom Ltd.)
Nukeador: Eddy Nigg (StartCom Ltd.) escribió: Apparently yes! From http://wiki.mozilla.org/CA:Root_Certificate_Requests see the lower section. I suggest that the representative of the CA starts a new bug according to the instructions of this page: Ok, I'm contacting now with Cristina Acedo, wh

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Frank Hecker
Nukeador wrote: > One doubt, how are the new certificates included in Firefox? With new > releases? Are they updated from a server? New root certificates are first added to NSS (the cryptographic library used by Firefox) and then new releases of NSS are incorporated into future versions of Fir

Re: verifying peer identity during handshake

2008-05-21 Thread Badra
On Tue, May 20, 2008 at 10:18 PM, Julien R Pierre - Sun Microsystems < [EMAIL PROTECTED]> wrote: > Rainer, > > Rainer Gerhards wrote: > > Hi group, > > > > my apologies for not reading through all the docs. I have a hopefully > > quick question and would like some short feedback before I go down >

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Nukeador
Eddy Nigg (StartCom Ltd.) escribió: Apparently yes! From http://wiki.mozilla.org/CA:Root_Certificate_Requests see the lower section. I suggest that the representative of the CA starts a new bug according to the instructions of this page: Ok, I'm contacting now with Cristina Acedo, who is from t

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Eddy Nigg (StartCom Ltd.)
Nukeador: Eddy Nigg (StartCom Ltd.) escribió: OK, I understand. This request is fairly new, but I also can't see anywhere at this bug that the representative of this CA submitted and completed all information required to start any evaluation according to http://wiki.mozilla.org/CA:Root_Certifi

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Kyle Hamilton
The representative of the CA must contact the Mozilla Foundation directly, not through an intermediary. That's the point that you're missing. -Kyle H 2008/5/21 Nukeador <[EMAIL PROTECTED]>: > Eddy Nigg (StartCom Ltd.) escribió: > > OK, I understand. This request is fairly new, but I also can't s

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Nukeador
Eddy Nigg (StartCom Ltd.) escribió: OK, I understand. This request is fairly new, but I also can't see anywhere at this bug that the representative of this CA submitted and completed all information required to start any evaluation according to http://wiki.mozilla.org/CA:Root_Certificate_Reques

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Gen Kanai
On May 22, 2008, at 5:36 AM, Kyle Hamilton wrote: > Cristina needs to OPEN an NEW BUG, with all her contact information. > The management of the request can only be done via direct contact > between the CA and the root team. > > There has been no valid request for inclusion. There is no "ball" in

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Kyle Hamilton
Cristina needs to OPEN an NEW BUG, with all her contact information. The management of the request can only be done via direct contact between the CA and the root team. There has been no valid request for inclusion. There is no "ball" in Mozilla's court. An authorized representative of FMNT must

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Eddy Nigg (StartCom Ltd.)
Nukeador: Eddy Nigg (StartCom Ltd.) escribió: Please make FNMT or the individual CAs aware of this fact and ask them to make a request for inclusion according to the guidelines from here: http://wiki.mozilla.org/CA:Root_Certificate_Requests There is nothing else you can do at this stage. T

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Jose Amalio
On 21 mayo, 16:35, Nukeador <[EMAIL PROTECTED]> wrote: > Eddy Nigg (StartCom Ltd.) escribió: > > > Please make FNMT or the individual CAs aware of this fact and ask them > > to make a request for inclusion according to the guidelines from here: > >http://wiki.mozilla.org/CA:Root_Certificate_Request

Elliptic Curve Key Generation Parameter Names for Standard Curves in JSS

2008-05-21 Thread Bill Price
Based on the LXR examples on the JSS test page I appear to be able to generate Elliptic Curve Pairs. The examples show generation of keys of various length. However, I would like to generate key pairs using the standard curves recognized by NIST or included in Suite B. The Java documentation ha

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Nukeador
Eddy Nigg (StartCom Ltd.) escribió: Please make FNMT or the individual CAs aware of this fact and ask them to make a request for inclusion according to the guidelines from here: http://wiki.mozilla.org/CA:Root_Certificate_Requests There is nothing else you can do at this stage. They have al

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread Eddy Nigg (StartCom Ltd.)
willyaranda: I don't know how certificates are used in Firefox3. If they are embedded in the main program or they are retrieved from mozilla's website. Well, the thing is that who must do the next step, Mozilla or FMNT, but we need the CA. Why? So, for Spanish users, we NEED the certificate. If

Re: Including FNMT cert in Firefox 3 (Spanish government)

2008-05-21 Thread willyaranda
On 20 mayo, 09:25, Nukeador <[EMAIL PROTECTED]> wrote: > Hello all, > > Following all comments and information in Bug 408008 (https:// > bugzilla.mozilla.org/show_bug.cgi?id=408008), I think that it's a high > priority to include this cert in the upcoming Firefox 3 release. > > A official member of

Re: verifying peer identity during handshake

2008-05-21 Thread Rainer Gerhards
Hi Julien, thanks for your reply, much appreciated. Coments inline below... On May 20, 10:18 pm, Julien R Pierre - Sun Microsystems <[EMAIL PROTECTED]> wrote: > Rainer, > > my apologies for not reading through all the docs. I have a hopefully > > quick question and would like some short feedback