Re: Problem on accessing a smart card in Firefox with JSS

2011-08-31 Thread helpcrypto helpcrypto
Hi Walter. In our company we have a similar scenario: certificates on smartcard+pkcs#11 (not opensc based)+jss4+applet+firefox. Im the developer and mantainer of the smartcard+pkcs11+installers, and a partner is it for jss4+applet. AFAIK, we are using jss4 'cause we had some problems with jss3. I

Restricting which CAs can issue certs for which hostnames

2011-08-31 Thread Boris Zbarsky
I was looking at our CA root list, and a lot of them seem like "specialist" CAs that would only issue certs for a limited range of hostnames. Could we formalize this, and have CAs indicate any such restrictions as part of their application, then enforce it on our end? That would limit the exte

Re: Problem on accessing a smart card in Firefox with JSS

2011-08-31 Thread Robert Relyea
On 08/31/2011 11:01 AM, Walter do Valle wrote: > With this scenario, I can run my applet (digitally signed), my applet can > access some certificate repositories from Firefox, but it cannot locate my > digital certificate in a smart card. > When I run the code below, I see a list of three PK11Toke

Problem on accessing a smart card in Firefox with JSS

2011-08-31 Thread Walter do Valle
Dear friends First of all, sorry for my "Pocahontas" English. English is not my natural language. Well, I'm facing a problem on access a digital certificate inside a smart card in an applet Java running on Firefox. In other words: I have an applet java that needs to access a PKCS#11 certificate in