During the Certificate issue process, is there anyway to select a token for user automatically?

2010-04-10 Thread Amax Guan
Hi,    I'm working on a Certificate renew process for a bank in china. The bank stored the certificate in a USB key, and when the user needs to renew the certificate, the bank will trigger the cert issue process to do that, using . But when the issue begins, because the USB key, which is a token, i

Certificate Patrol error (or malformed ssl certificate?)

2010-04-10 Thread Kurt Seifried
So I logged in to a bank today and Certificate Patrol threw up a warning I haven't seen before (see attached image). What is wrong with this you ask? Look at the dates on the certificates. When is 204/19/2010 exactly? So I downloaded the certificate and ran it through openssl, the text output loo

Re: Alerts on TLS Renegotiation

2010-04-10 Thread johnjbarton
On 4/9/2010 6:06 PM, Matt McCutchen wrote: On Fri, 2010-04-09 at 09:34 -0700, johnjbarton wrote: On 4/8/2010 12:13 PM, Matt McCutchen wrote: On Thu, 2010-04-08 at 09:35 -0700, johnjbarton wrote: On 4/7/2010 9:35 PM, Nelson B Bolyard wrote: ... Inconveniencing the users is a NECESSARY part of

Re: S/MIME interop issue with Outlook 2010 beta

2010-04-10 Thread Jean-Marc Desperrier
On 31/03/2010 17:11, Kaspar Brand wrote: On 31.03.2010 07:49, Michael Ströder wrote: It seems it's a CMS structure and recipientInfos contains subject key ids instead of issuerAndSerialNumber. It seems Seamonkey 2.0.x does not support that. Is it supported by the underlying libs? I believe so,

Re: Improving SSL client auth and bad certificate reporting in non-browser applications

2010-04-10 Thread Gervase Markham
On 26/03/10 19:04, Kai Engert wrote: thanks a lot for your feedback. I've created a graphical presentation for the client authentication part: http://kuix.de/mozilla/sslauth/cli-v1-pres/ I still haven't had a chance to look at this :-(( I'm very sorry. (I do have a good excuse, though: http:/