Re: Invalid certificate alert

2004-02-25 Thread Julien Pierre
Henrik, Henrik Gemal wrote: Thanx for the into Pierre. First name is Julien actually... 2 Could you help determine the cause of this alert to I can report it to the server admins. I narrowed it down to these URL. To reproduces first go to: https://i.tdconline.dk/tdco/gfx/local/sso/knap_q.gif

Re: Invalid certificate alert

2004-02-25 Thread Jean-Marc Desperrier
Henrik Gemal wrote: I narrowed it down to these URL. To reproduces first go to: https://i.tdconline.dk/tdco/gfx/local/sso/knap_q.gif then go to: https://bestilling.certifikat.tdc.dk/csp/authenticode/README You found a *very* interesting case. The culprint is the third certificate in the

Re: error importing CRL in Mozilla

2004-02-25 Thread paul b
Thanx for you answer, I just sent you a certificate and the CRL per mail. Perhaps you can have a look. Thanx CB Nelson Bolyard [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED]... paul b CB wrote: Hello, I am currently working on a project where I, amongst other, installed a

Re: Proposed CA certificate metapolicy - 7. threat models

2004-02-25 Thread Julien Pierre
Gervase, Gervase Markham wrote: Frank Hecker wrote: There's still the trademark issue, but I don't see why this couldn't be handled consistently with other localization-specific changes. For example, if the Mozilla Foundation allows the creators of the France-localized version to include,

Re: Invalid certificate alert

2004-02-25 Thread Julien Pierre
Jean-Marc, Jean-Marc Desperrier wrote: But the fingerprint of the two certificates do not match anymore, so NSS reports them as two different certs with the same serial number. Maybe for *that* particular case, NSS should use a fingerprint based on the signed part of the cert. It is annoying

content-encoding:gzip

2004-02-25 Thread Lupo
hello to all, I have a proxy installed on my computer to catch my data transfer with mozilla. I've noticed that a part of the data was encoded with gzip. Now, my questions is: Can I ask the server to send me the data uncompressed and if I can, how can I do it? How should I configure mozilla?

Re: content-encoding:gzip

2004-02-25 Thread Nelson Bolyard
Lupo wrote: hello to all, I have a proxy installed on my computer to catch my data transfer with mozilla. I've noticed that a part of the data was encoded with gzip. Now, my questions is: Can I ask the server to send me the data uncompressed and if I can, how can I do it? How should I configure

Re: pkcs11 and pkcs7 to sign a document

2004-02-25 Thread Welington B. Souza
NSS will do exactly what you want. There is even a command line program named cmsutil that will generate the signatures you need. The source is completely open and available, and if you can't build it yourself, there are downloadable zip files available from mozilla's FTP site that contain all

Re: Invalid certificate alert

2004-02-25 Thread John Gardiner Myers
Julien Pierre wrote: First, both NSS and OpenSSL are now using the same algorithm to compute fingerprints - on the entire certificate encoding, not the signed part. We had complaints that it was different and made it match (I don't remember what the difference was, as I didn't write the fix,