rt.
We consider them P1 and want to fix them by 6.1RTM.
Hope this helps.
Stephane.
Tech Manager. Personal Security Manager.
Patrick wrote:
> OK thanks. I just found out that there is a known bug about Communicator not
> being able to handle CRLs whose size are greater than 37 KB. Can someone
> confirm this? Is the limit still 37KB? Is this bug tracked in Mozilla?
>
> I have a NSS-enabled application that aims to import CRLs (very much like NSS'
> crlutil tool does) but I'm experiencing some very nasty cert7.db corruption
> when importing some CRLs. And can't figure out why certain CRLs are
> problematic (CRLs can be opened with no problem using Windows or can
> successfully do a DER dump using NSS' derdump tool). It looks more like the
> problem is with the CERT_ImportCRL function and/or the cert7.db file. I said
> the problem is nasty because CERT_ImportCRL returns an OK status when
> importing a CRL that cause the DB corruption.
>
> Help anybody?
>
> Steve Parkinson wrote:
>
> > The exposed HTTP interfaces for CMS are documented here:
> >
> > http://docs.iplanet.com/docs/manuals/cms/42sp2/custom_guide/contents.htm
> >
> > See chapter 3.
> >
> > To resolve your problem, you might also have to specifiy
> > ?op=getCRL
> >
> > Steve
> >
> > Patrick wrote:
> >
> > > Hello,
> > >
> > > I'd like to import a CRL into my Communicator browser. So under
> > > Security, Signers, I click View/Edit CRLs. There I select New and enter
> > > a URL for fetching the CRL from CMS. Something like:
> > > https://idca.cms.xyz.com:443/getCRL
> > >
> > > (BTW, this is the URL you get when you import the CRL directly from the
> > > CMS Web page and is used for Reloading the CRL. That part works.)
> > >
> > > However the CMS server returns with:
> > >
> > > Problem Processing Your Request
> > >
> > > The Certificate Manager encountered a problem while processing your
> > > request. The following is a detailed message of the error that
> > > occurred.
> > >
> > > You must select an option from the form.
> > >
> > > Please consult your local administrator for further assistance. The
> > > Certificate Management System logs may provide further
> > > information.
> > >
> > > What is missing in the above URL in order to get my Communicator browser
> > > to import the CRL?
> > >
> > > -- Patrick
> >
> > --
> > Steve Parkinson
> > Engineering Manager, Certificate Management System
> > Netscape Communications Corp
--
St�phane Saux [EMAIL PROTECTED] (650)937-6952
