Re: Firefox 3 connection now results in ssl_error_bad_cert_domain

2008-07-03 Thread Bruce Keats
first. Thanks again, Bruce On Jul 2, 7:37 pm, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Bruce Keats wrote, On 2008-07-02 14:52: > > > Thanks for the help.  That answers a lot of questions, but raises some more. > > I assume that firefox is trying to match with the hostname

Re: Firefox 3 connection now results in ssl_error_bad_cert_domain

2008-07-02 Thread Bruce Keats
Thanks for the help. That answers a lot of questions, but raises some more. On Wed, Jul 2, 2008 at 5:01 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > > That error means one thing: the name(s) in the cert do not match the > name (or IP address) of the server given in the URL. Nothing you ca

Firefox 3 connection now results in ssl_error_bad_cert_domain

2008-07-02 Thread Bruce Keats
Hi, I started using firefox 3 and I am now getting errors connecting to intra-net sites that were OK in firefox 2. We have our own intra-net and we have a CA that issues server certs and user certs. I have loaded the CA certs and the CA certs are visable under "Authorities" tab (Preferences->Adv

Re: Terminating SSL on the web proxy

2007-12-10 Thread Bruce Keats
I was curious about the last scenario. 2. The Server Side Proxy (a.k.a., Reverse Proxy) Public Internet Intranet [browser]-[proxy]--[server] SSL plain In this case, does the proxy have to convert the URIs

Is firefox 2.0.0.8 suppose to try different OCSP responders?

2007-11-02 Thread Bruce Keats
Now that I have the OCSP responder stuff working, I started playing around with how firefox uses the AIA records. In the end entity certificates, I have setup AIA that lists three OCSP responders, namely: Not Critical OCSP: URI: http://server1:9000 OCSP: URI: http://server2:9000 OCSP: URI: http://

Re: Problems with getting OCSP to work with firefox 2.0.0.8 (Fedora Core 7)

2007-11-02 Thread Bruce Keats
y Nigg (StartCom Ltd.) <[EMAIL PROTECTED]> wrote: > > Now I don't know much more, except as Nelson already mentioned that the CA > root might not be installed in the browser. If the problem persist, an > actual certificate and domain responder location etc is needed in order to &g

Re: Problems with getting OCSP to work with firefox 2.0.0.8 (Fedora Core 7)

2007-11-02 Thread Bruce Keats
Thanks for the hint. I didn't pay much attention to the cert warning as everything appears to work (other than the OCSP checks). I will give it another go once I resolve the warnings. Bruce On 11/2/07, Nelson B <[EMAIL PROTECTED]> wrote: > > Bruce Keats wrote: > > &

Re: Problems with getting OCSP to work with firefox 2.0.0.8 (Fedora Core 7)

2007-11-01 Thread Bruce Keats
tc.You can > send me mail also off-list if you feel more comfortable... > > -- > RegardsSigner: Eddy Nigg, StartCom Ltd. <http://www.startcom.org/> > Jabber: [EMAIL PROTECTED] Blog: Join the > Revolution!<http://blog.startcom.org/> > Phone: +1.213.341.0390 &g

Problems with getting OCSP to work with firefox 2.0.0.8 (Fedora Core 7)

2007-11-01 Thread Bruce Keats
Hi, I am having problems getting firefox 2.0.0.8 to send requests to the OCSP responder listed in the Authority Info Access (AIA) extenstion within the certificates. I am sure it is something fairly simple. On Firefox, I have enabled OCSP under "Edit"->"Preferences", the "Advanced" tab, "Encrypt

Re: Firefox 1.5 and importing CRLs?

2006-03-23 Thread Bruce Keats
On 3/23/06, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: Bruce Keats wrote:> I am having problems importing CRLs and managing CRLs within firefox.> In the linux version, the import button opens a window that allows me to > enter a file name for the CRL.  The CRL is in PEM f

Firefox 1.5 and importing CRLs?

2006-03-22 Thread Bruce Keats
I am having problems importing CRLs and managing CRLs within firefox.  In the linux version, the import button opens a window that allows me to enter a file name for the CRL.  The CRL is in PEM format is called " root.crl".  When I select OK, there are no error messages, how the CRL is not imported

How do I import a CRL import Firefox under Fedora Core 3?

2006-02-11 Thread Bruce Keats
Hi, I am trying to import a CRL into firefox, but I have not been able to  discover the right combination to things to get it to work.  The CRLs  are in binary DER format and are called "blah.crl".  I tried just  putting the file URL ( e.g. file:///blah.crl) without any luck (it just tries do save