Re: Problem with Content-type:application/x-x509-user-cert

2008-07-29 Thread smallway11
On Jul 30, 1:02 pm, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote: > > I checked other tabs but got nothing. > > I found firefox 2.x and 3.0 can work but version 1.5 can not. > > Is there any difference of key db between firefox 3.0(2.x) and firefox > > 1.5? > > I don't reme

Re: Problem with Content-type:application/x-x509-user-cert

2008-07-29 Thread Nelson B Bolyard
[EMAIL PROTECTED] wrote: > I checked other tabs but got nothing. > I found firefox 2.x and 3.0 can work but version 1.5 can not. > Is there any difference of key db between firefox 3.0(2.x) and firefox > 1.5? I don't remember that far back too well. I'm sure there are many differences in the bro

Re: Problem with Content-type:application/x-x509-user-cert

2008-07-29 Thread smallway11
On Jul 30, 12:04 pm, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote: > > But when the browser doesn't have the private key, it should popup a > > window said "The personal certificate can't be installed because you > > do not own the corresponding private key which was create

Re: Problem with Content-type:application/x-x509-user-cert

2008-07-29 Thread Nelson B Bolyard
[EMAIL PROTECTED] wrote: > But when the browser doesn't have the private key, it should popup a > window said "The personal certificate can't be installed because you > do not own the corresponding private key which was created when the > certificate was requested." I agree. > There is no any ac

Re: Problem with Content-type:application/x-x509-user-cert

2008-07-29 Thread smallway11
On Jul 30, 11:06 am, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote: > > I am a CA manager and I am trying to use Content-type:application/x- > > x509-user-cert to support user importing certificate into firefox. > > I now can import certificate on windows successfully but it

Re: Problem with Content-type:application/x-x509-user-cert

2008-07-29 Thread Nelson B Bolyard
Nelson B Bolyard wrote: > [EMAIL PROTECTED] wrote: > >> I am a CA manager and I am trying to use Content-type:application/x- >> x509-user-cert to support user importing certificate into firefox. >> I now can import certificate on windows successfully but it does not >> work on linux machine. >> Co

Re: Problem with Content-type:application/x-x509-user-cert

2008-07-29 Thread Nelson B Bolyard
[EMAIL PROTECTED] wrote: > I am a CA manager and I am trying to use Content-type:application/x- > x509-user-cert to support user importing certificate into firefox. > I now can import certificate on windows successfully but it does not > work on linux machine. > Could anyone give me suggestion abo

Problem with Content-type:application/x-x509-user-cert

2008-07-29 Thread smallway11
Dear All, I am a CA manager and I am trying to use Content-type:application/x- x509-user-cert to support user importing certificate into firefox. I now can import certificate on windows successfully but it does not work on linux machine. Could anyone give me suggestion about this issue? Thank you

Re: Use PEM formatted certs (was Re: Comparison of OpenSSL and NSS)

2008-07-29 Thread Daniel Stenberg
On Mon, 28 Jul 2008, Nelson B Bolyard wrote: > The requirement to put all cryptographically sensitive information into a > well defined crypto boundary seems very elegant. It explains how NSS was > able to work with so many third party crypto gizmos starting in the late > 90's, and how it was

Re: Comparison of OpenSSL and NSS

2008-07-29 Thread Nelson B Bolyard
Rainer Gerhards wrote, On 2008-07-29 03:41 PDT: > I am stepping in as a TLS-newbe who a few weeks ago selected to start > a project with GnuTLS over NSS because there is very little > *documentation* inside NSS that tells how to get started on a simple > system that does not involve in-depth knowl

RE: Question about JSS FIPS compliance

2008-07-29 Thread David Stutzman
> -Original Message- > From: > [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > la.org] On Behalf Of Nelson B Bolyard > Sent: Tuesday, July 29, 2008 1:41 PM > To: mozilla's crypto code discussion list > Subject: Re: Question about JSS FIPS compliance > How is software like Sun's Java JCE

Re: Question about JSS FIPS compliance

2008-07-29 Thread Nelson B Bolyard
Wan-Teh Chang wrote, On 2008-07-29 09:51: > NSS treats its own software crypto module (softoken) as a > PKCS #11 module. ... because it IS a PKCS#11 module. :) > NSS calls the functions of a PKCS #11 > module through function pointers. Here is an example: > http://mxr.mozilla.org/security/sour

Re: Question about JSS FIPS compliance

2008-07-29 Thread Wan-Teh Chang
On Tue, Jul 29, 2008 at 5:59 AM, Dean <[EMAIL PROTECTED]> wrote: > > So the question I have is really that the JSS source code does not > appear to actually call any FC_ functions. If that really is the case > then is JSS really a FIPS compliant implementation? Or, more likely, > the JSS code rea

Re: Question about JSS FIPS compliance

2008-07-29 Thread Dean
On Jul 28, 6:47 pm, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Dean wrote, On 2008-07-28 13:50: > > > > > If an application wants to claim FIPS compliance does it have to be > > implemented following all the guidelines set out in the FIPS certified > > applications Security Policy document? > >

RE: Question about JSS FIPS compliance

2008-07-29 Thread David Stutzman
> -Original Message- > From: > [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > la.org] On Behalf Of Nelson B Bolyard > Sent: Monday, July 28, 2008 6:48 PM > To: mozilla's crypto code discussion list > Subject: Re: Question about JSS FIPS compliance > JSS also provides an interface for pu

RE: Use PEM formatted certs (was Re: Comparison of OpenSSL and NSS)

2008-07-29 Thread David Stutzman
> -Original Message- > The requirement to put all cryptographically sensitive > information into a > well defined crypto boundary seems very elegant. It explains > how NSS was > able to work with so many third party crypto gizmos starting > in the late > 90's, and how it was able to get

Re: Comparison of OpenSSL and NSS

2008-07-29 Thread Rainer Gerhards
On Jul 27, 2:17 am, Nelson Bolyard <[EMAIL PROTECTED]> wrote: > Daniel Stenberg wrote, On 2008-07-26 13:45: > > > As a user of OpenSSL, NSS, yassl and GnuTLS I can certainly agree that > > GnuTLS has flaws in its API but NSS most certainly also has flaws as well > > _and_ notable missing features t