Hi Tito,
As far as I know you cannot set the <keygen> format, you will have to deal with
all formats at the CA.
Cheers,
Anders
----- Original Message -----
From: tito
To: mozilla's crypto code discussion list
Sent: Friday, May 29, 2009 08:04
Subject: Re: how to sign CRMF/SPKAC using openssl
thnx anders..
i have posted in openssl forum my query..
can i make PKCS10 string using <keygen> tag then ?
2009/5/29 Anders Rundgren <anders.rundg...@telia.com>
I have two answers.
1. This is an OpenSSL question and should be directed to an OpenSSL forum
2. Browsers indeed have different key-generation methods but they do have
one
thing in common: the methods are completely useless, not even PIN
protection
is a part of the plot unless you use pre-configured hard tokens
Anders
----- Original Message -----
From: tito
To: dev-tech-crypto@lists.mozilla.org
Sent: Friday, May 29, 2009 06:51
Subject: how to sign CRMF/SPKAC using openssl
Hi ,
I am making a CA site for my college project purpose.I learned that
different browsers use different
methods to generate CSR.Making CSR in IE was easy.For vista systems I used
CertEnroll.dll methods
and for non-vista IE i used xenroll.dll.I generated CSR in javascript
successfully using that. it is
in PKCS10.
I want to make my project compatible for mozilla and opera too
i want to do the same for mozilla too but i guess mozilla method doesnt
generate PKCS10 format
Then i came across generateCRMF and keygen tags..keygen is not recommended
i guess.
how to sign the CRMF request key i get in openssl ?
if i am using keygen tag, i think it gives SPKAC format..can we sign SPKAC
using openssl ?
i am able to generate CRMF and SPKAC..but doesnt know how to sign those in
openssl.please help me in
regard with this..
..thanks a lot.
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
------------------------------------------------------------------------------
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
