Re: mailer certificate retrieval via LDAP?

2006-06-09 Thread Victor Duchovni
On Thu, Jun 08, 2006 at 02:32:01PM -0400, Steven M. Bellovin wrote:

 Are there any common mailers -- open source preferred but not mandatory --
 that can query LDAP directories to retrieve X.509 certificates for use in
 S/MIME messages?  Evolution and Thunderbird are both able to send S/MIME,
 but don't seem to have any easy certificate retrieval mechanisms.
 

Thunderbird supports PKCS#11 plugins modules, so all you need is PKCS#11
plugin for LDAP. So question looks like a question about availability
of plugins, rather than MUAs...

-- 

 /\ ASCII RIBBON  NOTICE: If received in error,
 \ / CAMPAIGN Victor Duchovni  please destroy and notify
  X AGAINST   IT Security, sender. Sender does not waive
 / \ HTML MAILMorgan Stanley   confidentiality or privilege,
   and use is prohibited.

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: mailer certificate retrieval via LDAP?

2006-06-09 Thread Jeff . Hodges
You should consider also posting your query to ldap@umich.edu


JeffH



-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: mailer certificate retrieval via LDAP?

2006-06-09 Thread Alex Iliev
On Thu, Jun 08, 2006 at 02:32:01PM -0400, Steven M. Bellovin wrote:
 Are there any common mailers -- open source preferred but not mandatory --
 that can query LDAP directories to retrieve X.509 certificates for use in
 S/MIME messages?  Evolution and Thunderbird are both able to send S/MIME,

This works for me in a vanilla (well, debian) Thunderbird, using our
university LDAP directory (at Dartmouth). The certificates are present under
key userCertificate;binary in the LDAP, in base64.

Alex

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]