Re: Signing using JS in Safari

2010-04-16 Thread Sunny
Thanks Anders.
   This was really helpful. Going down i see applets as the only
solution if browser compatibility is to be taken seriously. I'm just
looking for signature plug-in and have no time to write an applet
using java pkcs apis.
   Openoces looks promising but any idea of the level of support they
provide for issues in the api/code?

On Apr 7, 11:45 am, Anders Rundgren anders.rundg...@telia.com wrote:
 Hi Sunny,
 I haven't heard about Message Pro.

 Here is an open source (free) applet plugin:

 http://www.openoces.org/index.html

 It is used in Denmark and maybe somewhere else as well.

 In Sweden the government has spent some $30M over the years on:

 http://nexussafe.com/en/Products/Nexus-Personal

 IMO, both solutions are inferior but since they are actually used
 it doesn't really matter :-)

 It interesting to note that many signature plugins come with an
 authentication plugin which unifies the PKI GUI which using TLS
 is quite terrible.

 Some crypto people think that replacing TLS-client-cert-auth with
 an application-level authentication mechanism is a bad thing but there
 are tons with drawbacks using TLS-client-cert-auth and there is no
 hope for improvements and the alternatives are already in place.
 Even USPTO have selected an Java applet for PKI login...

 Anders

 Sunny wrote:
  Hi Anders,
        Thanks for your mail. Is there any proprietary solution that's
  named Message Pro or so??

  On Apr 6, 5:26 pm, Anders Rundgren anders.rundg...@telia.com wrote:
  Hi,

  Since there are no standards in this space most banks and e-governments
  use proprietary (but cross-browser) Java plugins.  In the EU there are at
  least 10 different national schemes.

  Chrome and Safari presumably do not support any pre-configured solution
  since no such solution has gotten any traction worth mentioning.

  There is a lot of stuff you can buy though...

  Anders

  Sunny wrote:
  Hi,
      I'm not able to find any literature on the topic of Signing data
  using Digital Certificates with JS in Safari browser.
  like, in Firefox, we have window.crypto.signtext() method that you can
  call from Java script to select a certificate and sign the data using
  the certificate.
  For IE, we have a CAPICOM plug-in to do that.
  Do we have anything in chrome/safari that will help signing using
  Digital Certificates in java script? Please let me know.

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: Signing using JS in Safari

2010-04-07 Thread Sunny
Hi Anders,
  Thanks for your mail. Is there any proprietary solution that's
named Message Pro or so??



On Apr 6, 5:26 pm, Anders Rundgren anders.rundg...@telia.com wrote:
 Hi,

 Since there are no standards in this space most banks and e-governments
 use proprietary (but cross-browser) Java plugins.  In the EU there are at
 least 10 different national schemes.

 Chrome and Safari presumably do not support any pre-configured solution
 since no such solution has gotten any traction worth mentioning.

 There is a lot of stuff you can buy though...

 Anders

 Sunny wrote:
  Hi,
      I'm not able to find any literature on the topic of Signing data
  using Digital Certificates with JS in Safari browser.

  like, in Firefox, we have window.crypto.signtext() method that you can
  call from Java script to select a certificate and sign the data using
  the certificate.

  For IE, we have a CAPICOM plug-in to do that.
  Do we have anything in chrome/safari that will help signing using
  Digital Certificates in java script? Please let me know.

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Signing using JS in Safari

2010-04-06 Thread Sunny
Hi,
I'm not able to find any literature on the topic of Signing data
using Digital Certificates with JS in Safari browser.

like, in Firefox, we have window.crypto.signtext() method that you can
call from Java script to select a certificate and sign the data using
the certificate.

For IE, we have a CAPICOM plug-in to do that.
Do we have anything in chrome/safari that will help signing using
Digital Certificates in java script? Please let me know.


-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Accessing Certificate Issuer and Issued to in mozilla using JS

2010-01-15 Thread Sunny
Hi,
How can i access the Issuer and Issued to of the selected
digital certificate in JavaScript in firefox?

For Internet Explorer, CAPICOM provides API to do this but for firefox
i'm not able to. I've tried using window.crypto.

Example Java Script code:
try {
result = window.crypto.signText(Something to sign,ask);
if(result == 'error:userCancel' || result ==
'error:internalError' || result == 'error:noMatchingCert'){
// alert( Result=+result+. Staying back. );
return null ;
}
}
catch(ex) { }

There's one way. if siging is successfull, result is a BASE64-encoded
string. It has a structure shown at
http://docs.sun.com/source/816-6152-10/sgntxt.htm. But, when i tried
to decode this base64 string to get CN value of Subject i'm not
getting proper strings. Is there a better way?

Is there a way i can access the issued to field in the digital
certificate selected thro window.crypto object or any other object.
(or)
Is there a plug-in for firefox similar to CAPICOM for Internet
Explorer.
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto