Re: how can i enable psm for mozilla 1.3b

2003-02-19 Thread Kai Engert
What you see is most likely bug http://bugzilla.mozilla.org/show_bug.cgi?id=193241 The workaround is to either find file psm.xpt in your installation directory and remove it, or do a complete uninstall and clean reinstall of 1.3 beta. Kai [EMAIL PROTECTED] wrote: hello out there, i am

Re: Q:Can not import PKCS12 to NETSCAPE7.0

2003-02-14 Thread Kai Engert
- your p12 files might be invalid - maybe after deleting A, the cert is not completely purged from memory. Try to restart the application - maybe certs in A and B have identical serial number and issuer, that would cause confusion - could you try to nightly Mozilla build to see whether it's

Re: nss_Init() never returns

2003-02-03 Thread Kai Engert
I have no real idea based on the information you provided. I suggest you should try to debug what's happening inside that function. Maybe in your special version you are not passing in a good directory path that could be used by NSS to init the files. Kai Oskar Malm wrote: Hi! I'm working on

Re: openssl key/cert - NS key/cert db

2002-12-13 Thread Kai Engert
liug wrote: How can I use the NSS tools to convert a openssl generated key pem file to netscape key3.db ? Thanks! Frank You probably can't convert it, because a pem file is a simple collection of certs, but a key3.db is a complex database. You might want to create a database and use

Re: Serialized SSL Session Reuse With Mozilla 1.2

2002-11-20 Thread Kai Engert
Without having looked at the code, here is a first wild guess: Maybe what you see was caused by bug http://bugzilla.mozilla.org/show_bug.cgi?id=163605 You say you are using 1.2, but not exactly which version - 1.2 final has not yet been released. Builds *after* 1.2 beta have the fix for bug

Re: Mozilla S/MIME

2002-11-15 Thread Kai Engert
OCSP: When preparing the information shown in the tabular view of cert manager, it would be to slow to check all certificates for validity. This is the only place where we ignore the OCSP setting. Because of that, the check is delayed until you actually use the certificate for an action, and

Re: SSL warning: Viewing a page with encrypted unencrypted mix

2002-11-04 Thread Kai Engert
The warning ...contains some unencrypted... is shown, when at least one component of the shown content was not obtained using https. We also show that warning when JavaScript is used to modify the shown content. A discussion is in http://bugzilla.mozilla.org/show_bug.cgi?id=155760 Kai

Re: Password Manager File

2002-11-04 Thread Kai Engert
The password manager is called Wallet in Mozilla's sourcecode, that might help you find the sources more easily. The encryption key is stored within a profile's security database files. I guess you will need to use the NSS library to access the key. Mozilla calls functions PK11SDR_Encrypt and

Re: Problems encrypting for recipient with separate encryption/signature key

2002-10-01 Thread Kai Engert
After you received the send failure error message, please use the menu command view / message security. This window should provide more informtion about the availability of recipient certificates. Are all reported as valid here? If all those are valid, are you able to send an encrypted

Re: S/MIME decryption error

2002-09-02 Thread Kai Engert
Matthias Kubik wrote: Forgot to mention that decryption of messages encrypted from my home account with Notes works fine. It's just the other way around that doesn't work. Matthias Kai Engert [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]... If your certificate is selected

Re: S/MIME decryption error

2002-08-30 Thread Kai Engert
Newsgroup Account Setting - Security, that's my certificate which shows up for signing and encryption. Or is there another place to look at ? Thanks. Matthias Kai Engert [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]... I'd bet your profile does not contain the cert required

Re: email encryption certificate selection keeps changing

2002-08-30 Thread Kai Engert
Usually, when you import a certificate into Mozilla, each certificate will get assigned a unique nickname. The cert stored in the internal database will remember the association from actual cert to nickname. The configuration in mail remembers the cert nickname. If you are testing and doing

Re: Certificate handling weirdities.

2002-08-29 Thread Kai Engert
I think 1.0 had a bug where deleted certificates will still be listed in certificate manager until you restart the application. You could try to test with 1.0.1rc2. Re signing / encryption complaining about not having a cert, it's important that you configure both certificates in edit/mail

Re: S/MIME decryption error

2002-08-29 Thread Kai Engert
before it was sent to you, but it cannot be decrypted. There are unknown problems with this encrypted message. This is the whole dialog box I'm seeing. Any hints appreciated. Thanks in advance. Matthias Kai Engert [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]... Does

Re: 1.1a Win - How to set trust on s/mime certificate

2002-08-28 Thread Kai Engert
When you imported the CA certificate, did you select to trust it? If you open certificate manager, go the the Authorities tab, can you find that CA certificate and use view and edit to see whether it is trusted? If you go to Your Certificates, what is displayed in the upper part of the

Re: pls help: Install PKCS#11 plug-ins on Netscape 6

2002-08-28 Thread Kai Engert
I can't really help with XPInstall either, but some other suggestions: Could you test to use the simple approach of not using a jar/xpi file, but simply install the DLL? Have you tried edit/prefs/manage security devices/load/ and browse to the PKCS#111 DLL file directly? Are you trying with

Re: S/MIME decryption error

2002-08-28 Thread Kai Engert
Does the message really say cause there was no signature? A more detailed message can be viewed when clicking broken key icon, or by choosing view message security info from the menu. I would have expected a message like The certificate used to encrypt the message cannot be found, which would

Re: Problems getting client certs into cert-store

2002-08-15 Thread Kai Engert
John Douglass wrote: I've developed an open-source based Certificate Authority software package called Papyrus and previously (i.e. Netscpae 4x) I was able to use application/x-x509-email-cert and cat a PEM cert to the browser and it would invoke the certificate management to import the

Re: Anybody else noticed?

2002-04-15 Thread Kai Engert
Jason Barr wrote: Hi, Has anyone noticed that with 0.9.9, when you send an encrypted mail (kudos for getting this going!) the mail which is saved in the 'Sent' folder is not viewable, and the 'Invalid Encryption' message appears? It appears that the message is still encrypted with the

Re: S/MIME Regression?

2002-04-03 Thread Kai Engert
Andrew Perry wrote: I thought that this was fixed: When you open up a window to Compose a new email, and you switch between FROM accounts, that it would use the S/MIME setting of the new chosen account ??? Currently it is trying to use the original account settings ... Thanks, Andrew

Re: Certs are Case-Specific ???

2002-03-13 Thread Kai Engert
Andrew Perry wrote: I tried sending email with the first letter caps ([EMAIL PROTECTED]) and it says I dont have a cert .. but if I put [EMAIL PROTECTED] ... it works just fine .. I wouldn't have thought that case would have to do anything with it .. I'm not sure what the correct

Re: S/MIME (Digital ID) support in mozilla?

2002-03-06 Thread Kai Engert
goku wrote: How can I send signed (or encrypted) S/MIME emails without these buttons (or the padlock icon)? I mean I RTFM, went to the help section, went to the mozilla.org site and, it clearly states that Mozilla supports S/MIME. Inside the compose window, use the menu: Options/Security.

Re: Mail Security Spec #3

2001-11-20 Thread Kai Engert
Regarding the section E 2, reading a message with an attachment. Could It be confusing, that the encrypted and signed icons appear below the word attachment? Would it make sense to move this label above the attachment box, as it is done in the mail compose window? If you agree, I'd suggest to

Re: Mail Security Spec #3

2001-11-19 Thread Kai Engert
Frederick Roeber wrote: I'm not really sure that a pen signifies signed or signed by. I'd think it would mean written by, or maybe click here to write. I don't have a better icon idea, though.. maybe the seal-and-ribbons sometimes used to stand for certificate? I like that idea, too.

Re: Mail Security Spec #3

2001-11-19 Thread Kai Engert
Jennifer Glick wrote: Updated Security spec based on having a security Toolbar button in Mail Compose. The Toolbar security icon seems the best way to go since it makes the feature more discoverable without disturbing the attachment area. http://www.mozilla.org/mailnews/specs/security/

Re: Mail Security Spec #3

2001-11-19 Thread Kai Engert
Jennifer Glick wrote: Updated Security spec based on having a security Toolbar button in Mail Compose. The Toolbar security icon seems the best way to go since it makes the feature more discoverable without disturbing the attachment area. http://www.mozilla.org/mailnews/specs/security/

Re: Why Netscape 6 final Release doesn't support S/MIME ?

2000-12-13 Thread Kai Engert
"Nelson B. Bolyard" wrote: NSS has an S/MIME tool kit. It simply hasn't yet been integrated into Mozilla or N6. Any volunteers? I'm interested to get this feature in. I'm not sure whether I'll able to do it (alone), but at least I want to learn how much work it would be for me. As I have