> -----Ursprüngliche Nachricht----- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Auftrag von Oliver > Welter *EXTERN* > Gesendet: Mittwoch, 27. Juli 2005 20:56 > An: [email protected] > Betreff: Re: [Openca-Users] crypto.signText returns noMatchingCert > > > Hi Michi, > > > "Sign is needed to proceed" occurs when I try to revoke a > certificate and sign this request. > > This occurs, because window.crypto.signText(text, "ask") > always returns "error: noMatchingCert" with Firefox 1.0.6, > though I have imported successfully several certificates into > "Your Certificates" (with Tools -> Options -> Advanced -> > Manage Certificates). > > The CA Certificate is imported too, it is trusted for > everything (identify web sites, mail users, software makers). > > > > Why does not appear the box for selecting the certificate > when signText is called ? > > Are there special requirements for the certificate ? (the > "nsCertType=client" and "extendedKeyUsage=SSL Client" > extension seem to be not enough) > > Or ... ? > > So there are 3 possible issues - I dont have a sufficient Testing > environment here atm :( > > It might be a FireFox issue but it might also be that this funtion is > broken and nobody ever tried it.... > Can you confirm that FireFox is working, so can you sign CSRs ? > It is a Firefox issue. CSR signing behaves exactly as CRR signing (error: noMatchingCert). I have a one line test Javascript, which only calls window.crypto.signText, and this returns the above error too. I asked this question on the Mozillazine forum, but nobody answered until now :-(
--Michi ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
