Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Nelson Bolyard wrote: > I think it would be more useful to find out if FF/TB can find the cert(s) > for the issuer of your cert, and what extensions (if any) it finds in > your cert, and the contents of those extensions. Well, after I started from scratch with a TB from Mozilla the purpose was co

Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Eddy Nigg wrote: > >> On 01/21/2009 03:36 PM, Michael Bell: > >> Sorry for wasting your time > > No waste was produced ;-) Good to know. > Also the CA certificates must be imported into your profile for this to > work and have the correct trust bits set. This i

Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Hi, I think we or better I should stop here. OpenSC clearly announced that CardOS V4.3B is only supported if the card was created with OpenSC. So you were hundert percent right. It looks like only the error message is not fully correct. I read on an OpenSC page that there is a secret StartKey whic

Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Eddy Nigg wrote: > > On 01/21/2009 01:19 PM, Michael Bell: >> No, I use the Siemens software on Windows and OpenSC on Linux. > > To all of my knowledge they aren't compatible. After I removed my whole thunderbird profile I am one step further. The certificate displays the

Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Michael Bell wrote: > Michael Bell wrote: > >> I analysed the situation and discovered that the purpose of the cert >> on Windows is "Client, sign, encrypt" but the purpose on Linux is >> "". I checked the cert with OpenSSL and noticed that the >>

Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Michael Bell wrote: > I analysed the situation and discovered that the purpose of the cert > on Windows is "Client, sign, encrypt" but the purpose on Linux is > "". I checked the cert with OpenSSL and noticed that the > certificate does not include the usual nsCe

Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Eddy Nigg wrote: > > On 01/21/2009 01:07 PM, Michael Bell: >> Eddy Nigg wrote: >> >>> On 01/21/2009 11:57 AM, Michael Bell: >>> >>> Which driver are you using on Linux? Is this an Aladdin eToken? Which >>> library did you choose as the PKCS1

Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Michael Bell wrote: > > I analysed the situation and discovered that the purpose of the cert > on Windows is "Client, sign, encrypt" but the purpose on Linux is > "". I checked the cert with OpenSSL and noticed that the > certificate does not include the usual

Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Eddy Nigg wrote: > On 01/21/2009 11:57 AM, Michael Bell: > > Which driver are you using on Linux? Is this an Aladdin eToken? Which > library did you choose as the PKCS11 module? I use a Siemens CardOS V4.3B Smartcard. It is a real Smartcard and no USB token. I use the OpenSC PK

Re: OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Gen Kanai wrote: > > Have you tried downloading Thunderbird for Linux from Mozilla and trying > that? Yes, after your recommendation I downloaded Thunderbird 2.0.0.19 directly from Mozilla. The HW version of the internal PKCS#11 token on Windows and Linux are no identical. Nevertheless the certif

OS dependence of mail cert profiles

2009-01-21 Thread Michael Bell
Hi, I use a Smartcard with a X.509 certificate (Siemens CardOS). This certificate works with Thunderbird 2.0.0.19 on Microsoft Windows XP SP3. If I use the same smartcard with Linux and Thunderbird 2.0.0.19 (more exactly icedove from Debian unstable) then I can configure all the necessary stuff (e