Re: common name for https certificates in embedded devices

2006-11-18 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clem Taylor schrieb: > Hi, Hello Clem, > Firefox seems to accept the subjectAltName extension, but I'm having > troubles getting firefox to trust the additional level of certificate > hierarchy. [...] > Root CA cert (self signed) [added to trust stor

Re: common name for https certificates in embedded devices

2006-11-17 Thread Clem Taylor
Hi, Firefox seems to accept the subjectAltName extension, but I'm having troubles getting firefox to trust the additional level of certificate hierarchy. I started out with something that looks like: Root CA cert (self signed) [added to trust store on browser] Device CA cert (signed by Root CA

Re: common name for https certificates in embedded devices

2006-11-15 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clem Taylor schrieb: > Hi, Hello Clem, > It seems silly that the browser is putting so much trust > into DNS or an IP address. I'm hoping someone knows of a better > solution to this problem. No the other way around: It assumes the user want to acces

common name for https certificates in embedded devices

2006-11-14 Thread Clem Taylor
Hi, I'm working on an embedded device that makes heavy use of SSL. The primary use of SSL is for authentication, users need to make sure that they are talking to the correct device. As a result, each device has a few SSL certificates that are created, signed and written to the device during manuf