Re: Question for CA representatives about PKCS#10 CSRs you accept

2010-07-21 Thread aerowolf
I can tell you that Eddy Nigg's (Startcom) system drops all ATTRIBUTE requests, relying on the CSR simply as a means of knowing what the public key is and proof of possession of the private key. and believe me, it'd be much easier if it didn't. -Kyle H On Thu, Jun 17, 2010 at 11:45 AM, Nelson

RE: Question for CA representatives about PKCS#10 CSRs you accept

2010-07-21 Thread Varga Viktor
age- > From: dev-tech-crypto-bounces+varga_v=netlock...@lists.mozilla.org > [mailto:dev-tech-crypto-bounces+varga_v=netlock...@lists.mozilla.org] > On Behalf Of Nelson B Bolyard > Sent: Thursday, June 17, 2010 8:46 PM > To: mozilla's crypto code discussion list > Subject: Question fo

Question for CA representatives about PKCS#10 CSRs you accept

2010-06-17 Thread Nelson B Bolyard
I have a question for CAs that accept PKCS#10 CSRs. Background: PKCS#10 certificate requests may contain an optional set of ATTRIBUTEs. One type of ATTRIBUTE, the only type mentioned in PKCS#10, is the PKCS#9 certificate Extension Request. But PKCS#10 suggests that other types could be defined,