Hello!

What I want to make possible is this:

Somebody searches for a certificate with the search function in the 
public interface, and he finds it. Then he clicks on the 
serial number and the certificate gets displayes (using the viewCert). 
After that, he decides that he wants this certificate to be installed 
under "other people" in his certificate store, so he chooses the format of 
the certificate (on the botom) and klicks "OK". In the ideal solution, 
Mozilla/Netscape/Firefox would just put it in the certificate storage and 
that's it, without even asking a question. IE would offer you to install 
it or save it. What really happens is that Mozilla doesn't know what to do 
with the thing and just offers you to save the file or open it with 
whatever you want, IE instead manages to recognize the file (mostly 
because of the .crt on the end of the filename). So, as I have said, 
Mozilla is bothered by the "Content-Disposition" line, which confuses it, 
but makes IE work. This is why, I still say that it should determine the 
type of browser somebody is using, and then apply this information to the 
functionality of sending the certificate. If Mozilla is being used it 
doesn't send the "Content-Disposition" line, while the opposite in the 
case of IE.

Is this possible to achieve?

Thanks,
Janez

On Thu, 30 Sep 2004, Michael Bell wrote:

> Hi Janez,
> 
> > I got in a strange problem. I noticed, that when wanting to download an 
> > "another user" certificate seen from the certs list, MS IE works fine, 
> > because it recognizes the content from the file type, for instance 
> > certificate.der and it offers to open the certificate. At the same time, 
> > Mozilla does not have a clue about what to do with such a file. The mime 
> > type for sending certificates in the DER format is application/binary 
> > Mozilla doesn't know what to do with this.
> > 
> > Ok, I tried to correct this in lib/cmds/sendcert to application/x-x509-email-cert 
> > and it was 
> > still the same. I putted out the Content-Disposition: attachment; line and 
> > Mozilla started to work and put the certificate in as it should, but then 
> > IE did not have clue what to do with the certificate being downloaded and 
> > it just offered to Save it.
> 
> There are two different situations:
> 
> 1. If you only want to passively download a certificate then go to the 
> certificate which you need, chose the format and download it.
> 
> 2. If you want to install the certificate of another user then go to the 
> certificate on the public interface and choose the installation link. 
> This link uses the script send_email_cert which sends the correct 
> content-type.
> 
> Michael
> 



-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to