Re: NSS, AIA, Bridge

2009-07-19 Thread Nelson Bolyard
I previously replied to this but my reply hasn't shown up here in the newsgroup, apparently, so ... On 2009-07-14 06:44 PDT, dmorford wrote: Is Firefox the program that you're trying to get to use AIAs and CDPs? Firefox does not do that yet, not even when it has NSS 3.12. Firefox 3 does not

Re: NSS, AIA, Bridge

2009-07-14 Thread dmorford
Is Firefox the program that you're trying to get to use AIAs and CDPs? Firefox does not do that yet, not even when it has NSS 3.12. Firefox 3 does not yet use this new feature. Any chance Firefox 3.5 supports AIA path processing and CDPs? You wrote above that Firefox 3 does not. I didn't

Re: NSS, AIA, Bridge

2009-06-05 Thread Néric
Hi Nelson, First of all, thank you very much for your time and for the quality answers. I’ve understood everything except but one thing: Did you really mean that I could have 2 versions of NSS on my computer? One for Debian and one specific to Mozilla products. And then what would exactly

Re: NSS, AIA, Bridge

2009-06-05 Thread Néric
Hi Nelson, Excuse me, I meant can I have a Firefox3 with an NSS 3.11? Because Firefox 3, on my test environment, is not able to fetch the missing certificates! That means that I don't have NSS 3.12 or (sadly) that NSS 3.12 is not well implemented (hope not). Once again, with the same

Re: NSS, AIA, Bridge

2009-06-05 Thread Nelson B Bolyard
On 2009-06-05 03:16 PDT, Néric wrote: Hi Nelson, First of all, thank you very much for your time and for the quality answers. I’ve understood everything except but one thing: Did you really mean that I could have 2 versions of NSS on my computer? One for Debian and one specific to Mozilla

NSS, AIA, Bridge

2009-06-04 Thread Néric
Context: I am working on PKI cross certification using a PKI bridge. To fetch missing certificates, I use the following AIA certificate extension: CA Issuer: URI : http://_...@ftp_server__/.../bundle.p7c where bundle.p7c contains the missing certificates (pkcs7 format).

Re: NSS, AIA, Bridge

2009-06-04 Thread Nelson B Bolyard
On 2009-06-04 02:23 PDT, Néric wrote: Context: I am working on PKI cross certification using a PKI bridge. To fetch missing certificates, I use the following AIA certificate extension: CA Issuer: URI : http://_...@ftp_server__/.../bundle.p7c where bundle.p7c contains the missing