Re: NSS, AIA, Bridge

2009-07-23 Thread Nelson B Bolyard
On 2009-07-22 05:59 PDT, Varga Viktor wrote: >> FF 3.5.0 and FF 3.5.1 do not support fetching of certs from AIA extension >> URIs, nor fetching of CRLs from CDP extension URIs. The code to fetch >> certs from AIA URIs is present, but Firefox has not yet put it into use. > > What was the cause to

RE: NSS, AIA, Bridge

2009-07-22 Thread Varga Viktor
>FF 3.5.0 and FF 3.5.1 do not support fetching of certs from AIA extension >URIs, nor fetching of CRLs from CDP extension URIs. The code to fetch >certs from AIA URIs is present, but Firefox has not yet put it into use. What was the cause to disable it?? >The code to do CRL fetching is not yet

Re: NSS, AIA, Bridge

2009-07-19 Thread Nelson Bolyard
I previously replied to this but my reply hasn't shown up here in the newsgroup, apparently, so ... On 2009-07-14 06:44 PDT, dmorford wrote: >>> Is Firefox the program that you're trying to get to use AIAs and CDPs? >>> Firefox does not do that yet, not even when it has NSS 3.12. >>> Firefox 3 doe

Re: NSS, AIA, Bridge

2009-07-14 Thread dmorford
>> Is Firefox the program that you're trying to get to use AIAs and CDPs? >> Firefox does not do that yet, not even when it has NSS 3.12. >> Firefox 3 does not yet use this new feature. Any chance Firefox 3.5 supports AIA path processing and CDPs? You wrote above that Firefox 3 does not. I didn

Re: NSS, AIA, Bridge

2009-06-05 Thread Nelson B Bolyard
On 2009-06-05 03:16 PDT, Néric wrote: > > Hi Nelson, > > First of all, thank you very much for your time and for the quality > answers. I’ve understood everything except but one thing: > Did you really mean that I could have 2 versions of NSS on my computer? > One for Debian and one specific to M

Re: NSS, AIA, Bridge

2009-06-05 Thread Néric
Hi Nelson, Excuse me, I meant can I have a Firefox3 with an NSS 3.11? Because Firefox 3, on my test environment, is not able to fetch the missing certificates! That means that I don't have NSS 3.12 or (sadly) that NSS 3.12 is not well implemented (hope not). Once again, with the same bridg

Re: NSS, AIA, Bridge

2009-06-05 Thread Néric
Hi Nelson, First of all, thank you very much for your time and for the quality answers. I’ve understood everything except but one thing: Did you really mean that I could have 2 versions of NSS on my computer? One for Debian and one specific to Mozilla products. And then what would exactly the

Re: NSS, AIA, Bridge

2009-06-04 Thread Nelson B Bolyard
On 2009-06-04 02:23 PDT, Néric wrote: > Context: > > I am working on PKI cross certification using a PKI bridge. > To fetch missing certificates, I use the following AIA certificate > extension: > > CA Issuer: URI : http://_...@ftp_server__/.../bundle.p7c > > where bundle.p7c contains the missin

NSS, AIA, Bridge

2009-06-04 Thread Néric
Context: I am working on PKI cross certification using a PKI bridge. To fetch missing certificates, I use the following AIA certificate extension: CA Issuer: URI : http://_...@ftp_server__/.../bundle.p7c where bundle.p7c contains the missing certificates (pkcs7 format). ***