thnx anders..
i have posted in openssl forum my query..

can i make PKCS10 string using <keygen> tag then ?


2009/5/29 Anders Rundgren <[email protected]>

>  I have two answers.
>
> 1. This is an OpenSSL question and should be directed to an OpenSSL forum
>
> 2. Browsers indeed have different key-generation methods but they do have
> one
>   thing in common: the methods are completely useless, not even PIN
> protection
>   is a part of the plot unless you use pre-configured hard tokens
>
> Anders
>
> ----- Original Message -----
> From: tito
> To: [email protected]
> Sent: Friday, May 29, 2009 06:51
> Subject: how to sign CRMF/SPKAC using openssl
>
>
> Hi ,
>
> I am making a CA site for my college project purpose.I learned that
> different browsers use different
> methods to generate CSR.Making CSR in IE was easy.For vista systems I used
> CertEnroll.dll methods
> and for non-vista IE i used xenroll.dll.I generated CSR in javascript
> successfully using that. it is
> in PKCS10.
>
> I want to make my project compatible for mozilla and opera too
> i want to do the same for mozilla too but i guess mozilla method doesnt
> generate PKCS10 format
> Then i came across generateCRMF and keygen tags..keygen is not recommended
> i guess.
> how to sign the CRMF request key i get in openssl ?
>  if i am using keygen tag, i think it gives SPKAC format..can we sign SPKAC
> using openssl ?
> i am able to generate CRMF and SPKAC..but doesnt know how to sign those in
> openssl.please help me in
> regard with this..
>
> ..thanks a lot.
>
>
>
>
>
>
>
> --
> dev-tech-crypto mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-tech-crypto
>
> --
> dev-tech-crypto mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/dev-tech-crypto
>
-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to