Re: [ANNOUNCE] NSS 3.7.3 Release
Emil Assarsson wrote: Is there any plans written for the 4.x releses? And if, where can I find them? Our design and engineering documents for NSS 4.x (codename Stan) can be found at http://www.mozilla.org/projects/security/pki/nss/stan/. We don't have a schedule at the moment. I will post the schedule here as soon as we have one. Wan-Teh
Re: crypto.signText() and Form-Signing
Are you sure Netscape 6.2 is implemented over Mozilla 1.3b?. In www.mozilla.org I have read that Netscape 7.02 is based on mozilla 1.0.2. If it is true, my component will not work with netscape. Kohinoor Verma wrote: Hi lfern, I am using Mozilla 1.3b (on windows 2000, netscape 6.2).I get the error CLABSignString not defined when i press the sign button. Rgds Kohinoor [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]...
Re: crypto toolkit
boutteau wrote: Julien Pierre [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]... boutteau wrote: I am loocking for a tool kit to do file signature: 1) select a file 2) select a certificate 3) sign the selected file with the certificate 4) create .zip with 2 files : - selected_file.ext - selected_file.ext.sig Second tool is to verify than a file and signature are matching (with OCSP to verify the revocation of the certificate). Result : Y or N with any information on the certificate which was used to sign. Third tool : same than one but for cripting Forth tool : a tool to decript if I have the right key to do it Can we imagine those tools in Mozilla for any future and when? Please take a look at NSS athttp://www.mozilla.org/projects/security/pki/nss/ . It is the open-source security library that is at the heart of the mozilla browser. It contains many tools that will do what you need. cmsutil and signtool are the tools you want to look at for signing and encrypting. Is there any integrator in France (or Europe) to do this kind of work? Sébastien Abdi ([EMAIL PROTECTED]) tried to send the folowing mail but it was rejected because his address wasn't white-listed. Maybe mine is :P... Of course there is ! We work on this for our customers signature problems which are not so far from yours, afaik ;-)) Bye, -- Sébastien Abdi IDEALX S.A.S. Security Department Manager http://www.IDEALX.com/ Sincerely, -- Mathias
Re: crypto.signText() and Form-Signing
[EMAIL PROTECTED] wrote: This is NOT a plea for the fastest possible integration into Mozilla. Sorry Mathias ;-) If we use simple existing technologi we may even get MicroSoft, Opera, Konqurer and (the w3c referense browser) Amaya to support this solution. I also have to think a bit more ... Suggestions anyone? As I stated in my first mail, the topic is likely to spark lots of ideas and proposals. http://secclab.mozdev.org and http://www.sourceforge.net/projects/formx/ seem like interesting forums to discuss/investigate future implementation and I look forward having more time to go further. But looking at the newsgroup, there are things I have not seen challenged (yet?): - there is a need of a function to sign stuff using Mozilla. - there is/was a function called crypto.signText() in Netscape that provided that feature in a way that is good enough. - there are people wanting this function in Mozilla. - there is a patch http://bugzilla.mozilla.org/show_bug.cgi?id=29152 that implements successfully crypto.signText() in Mozilla. The next logical step would be to include that patch in the Mozilla CVS. The bug has been classified as P3 Enhancement with a Target Milestone Futur for PSM 2.0. I agree to that this is not a critical/show-stopper bug. But I don't understand several : - why this feature is so low on the TODO list and constantly pushed back (but this is probably subjective) ? - why is fixing a feature regression called enhancement ? - what is needed for a patch to be tested (except for kaie I see no activity) from Mozilla team. Is it because it's called enhancement that it is not tested ? - in http://bugzilla.mozilla.org/show_bug.cgi?id=139258 (a duplicate bug), there is a comment form Stephane Saux (2002-04-24): This function is not available in PSM. This is a future enhancement.. What does that mean ? One solution would probably involve voting for this bug to tell the Mozilla team you think this issue is important: http://bugzilla.mozilla.org/show_bug.cgi?id=29152 I know this might sound like a typical user enhancement request: Why isn't this feature in ?, This is important, etc... But it's not something superficial, esthetic or comfortable. It's a feature that excludes or will exclude Mozilla from being an acceptable browser: if you don't believe me look at the bug reports and in the newsgroup, you'll see people that *need* this function for their application to support Mozilla. Sincerely, -- Mathias Brossard [EMAIL PROTECTED]
Re: crypto.signText() and Form-Signing
Hi, I agree that signText should be solved before anything else like this is done. There is no reason way it shouldn't be placed in a higher prio. It is implemented in a lot of services. It will solve a problem I have in a neat and easy way. I will wait with my suggestions of a expanded functionality until this bug is solved. And a BUG it is. Is there any voting in the bugzilla and where can I do so? -- Emil Assarsson
Re: [ANNOUNCE] NSS 3.7.3 Release
Great Do you know if there is any plans for ncurses support in the PSM project (maybe asking the wrong person)? Wan-Teh Chang wrote: Emil Assarsson wrote: Is there any plans written for the 4.x releses? And if, where can I find them? Our design and engineering documents for NSS 4.x (codename Stan) can be found at http://www.mozilla.org/projects/security/pki/nss/stan/. We don't have a schedule at the moment. I will post the schedule here as soon as we have one. Wan-Teh
Re: crypto.signText() and Form-Signing
Luis Fernando Pardo wrote: Are you sure Netscape 6.2 is implemented over Mozilla 1.3b?. In www.mozilla.org I have read that Netscape 7.02 is based on mozilla 1.0.2. If it is true, my component will not work with netscape. Netscape 7.02 is based on Mozilla 1.0.2 . Netscape 6.2 is based on some pre-1.0 version of Mozilla, I believe 0.9.4 .
