Re: cert extension: authority key identifier (AKI)

2009-11-21 Thread Nelson B Bolyard
On 2009-11-21 10:46 PST, Ian G wrote: > Hi Nelson, > > On 20/11/2009 20:57, Nelson B Bolyard wrote: >> On 2009-11-19 08:24 PST, Daniel Joscak wrote: >>> Why correct authority key identifier (AKI) can not include both the key >>> ID and the issuer's issuer name and serial number. We have an author

Re: cert extension: authority key identifier (AKI)

2009-11-21 Thread Ian G
Hi Nelson, On 20/11/2009 20:57, Nelson B Bolyard wrote: On 2009-11-19 08:24 PST, Daniel Joscak wrote: Or is this a question about the behavior of Mozilla's crypto code? In that case, this is the right list. I read it is a question as to what goes wrong when it is done, and why it is that

Re: cert extension: authority key identifier (AKI)

2009-11-21 Thread Frank Hecker
Nelson B Bolyard wrote: On 2009-11-19 08:24 PST, Daniel Joscak wrote: I would like to ask for an explanation of mozilla trust cert. store requirement for adding CA. Is this a question about Mozilla's policy for adding root CA certificates to the set of trusted root CA certificates that it ship