Does Internet Explorer Support Smart Card?

2003-04-03 Thread Mark Liu
I am working on a CA project, in which I have Internet Explorer generate the RSA public/private key pair and send it to the CA for a client certificate. This way, the private key stays somewhere with the local computer. And thus I assume that the certificate is confined to this computer. Well, I

Windows does not have enough information to verify this certificate

2003-03-14 Thread Mark Liu
When we view a certificate issued by some CA, windows may tell us this: Windows does not have enough information to verify this certificate. What does this mean? Does it mean that I have not installed the CA cert as a trusted root CA? __ Do you Ya

Problem running Tomcat SSL with my CA-generated certificate

2003-03-13 Thread Mark Liu
I am sorry if I should not have posted this message in this list. But I've been trying in both tomcat-user and tomcat-dev, nobody has a clue. Therefore, I wanna try my luck here. I use Tomcat 4.1.12 under Windows 2000. I know how to run Tomcat in SSL mode by generating a self-signed cert using

Re: Importing PKCS7 Certificate Into Internet Explorer

2003-02-27 Thread Mark Liu
how we get the > cert back from the CA > > so you should have > > pkcsa7 =< wherever or however you get your cert > > > > Mark Liu <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 02/27/03 09:25 AM > Please respond to openssl-users > > &g

Re: Importing PKCS7 Certificate Into Internet Explorer

2003-02-27 Thread Mark Liu
of a hidden HTML form? Thanks. Mark --- [EMAIL PROTECTED] wrote: > - Forwarded by Mark Shoneman/DLX Guest on > 02/27/03 06:36 AM - > > > Mark Liu <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 02/26/03 06:07 PM > Please respond to openssl-u

Importing PKCS7 Certificate Into Internet Explorer

2003-02-26 Thread Mark Liu
Mr. Mark Shoneman gave a fragment of VBScript code to import a PKCS7 certificate into Internet Explorer. The code is pasted below. I am very dumb at VBScript, and have difficulty understanding line 5, i.e., pkcs7 = result.header.pkcs7ChainBase64 Question 1: What object is the "result"? Ques

Mark, the new classid works now. Your version has an error.

2003-02-03 Thread Mark Liu
o match what's on the > > enrolling > > clients box. Check on your enrollment box and > you'll > > see the xenroll.dll, > > This has to be the same as the client DLL > > > > > Mark > >

Sorry, I meant both the new and old clsid stopped working.

2003-02-03 Thread Mark Liu
sorry for the confusion. --- [EMAIL PROTECTED] wrote: > http://support.microsoft.com/default.aspx?scid=kb;en-us;323172 > for all > versions > > > > > Mark Liu <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 02/03/03 03:54 PM > Please respo

Re: Does this mean that I don't have any Cryptographic Service Provider in my system?

2003-02-03 Thread Mark Liu
as usual. The new one still does not work. Kinda funny, huh? Mark --- [EMAIL PROTECTED] wrote: > http://support.microsoft.com/default.aspx?scid=kb;en-us;323172 > for all > versions > > > > > Mark Liu <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 0

Re: Does this mean that I don't have any Cryptographic Service Provider in my system?

2003-02-03 Thread Mark Liu
, > This has to be the same as the client DLL > > Mark > S > > > > > Mark Liu <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 02/03/03 02:09 PM > Please respond to openssl-users > > > To:

Re: Does this mean that I don't have any Cryptographic Service Provider in my system?

2003-02-03 Thread Mark Liu
hat tell the story > > > > > Mark Liu <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 02/03/03 01:02 PM > Please respond to openssl-users > > > To: [EMAIL PROTECTED] > cc: > Subject:Re: Does this mean that I

Re: Does this mean that I don't have any Cryptographic Service Provider in my system?

2003-02-03 Thread Mark Liu
43F8F289-7A20-11D0-8F06-00C04FC295E1" > CODEBASE="/xenroll.dll" > id=Enroll> > > > which is the old dll you may need to change to > > > > classid="clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1" > > CODEBASE=&q

RE: Does the Web server have to run SSL in order to do certificat es?

2003-01-27 Thread Mark Liu
educate.  Thanks. Mark  "Shalkebaev,AntonMSCAG" <[EMAIL PROTECTED]> wrote: You don't need to run SSL for your For your IE your should adjust settings to permit run ActiveX.Anton-Original Message-From: Mark Liu [mailto:[EMAIL PROTECTED]]Sent: Monday, January 27, 2003 08:5

Does the Web server have to run SSL in order to do certificates?

2003-01-26 Thread Mark Liu
I am working on an X509 public key certificate authentication project using Java technology. The client applies for a certificate from the Web interface of the CA. Currently, I only want to consider Internet Explorer. Question 1: I run Tomcat 4.1.18 under my win2k box as the CA Web server. Do