Re: Certificate Profiles

2015-03-16 Thread Erwann Abalea
Le dimanche 15 mars 2015 01:59:10 UTC+1, Peter Bowen a écrit : I've been trying to figure out what is required, forbidden, and optional for X.509 certificates that conform to the Mozilla requirements. It isn't all that easy given the indirection in the requirements (you need at least the

RE: Certificate Profiles

2015-03-16 Thread Jeremy Rowley
Not to mention, that the lack of a required OCSP URI (with a stapled response) is something that the forum has talked about correcting a few times. It's likely going to be required (hopefully with an exception for short lived certs). Jeremy -Original Message- From: dev-security-policy

Re: Certificate Profiles

2015-03-16 Thread Erwann Abalea
Le lundi 16 mars 2015 21:47:07 UTC+1, Peter Bowen a écrit : On Mon, Mar 16, 2015 at 1:04 PM, Erwann Abalea eaba...@gmail.com wrote: Le lundi 16 mars 2015 19:30:47 UTC+1, Peter Bowen a écrit : On Mon, Mar 16, 2015 at 10:52 AM, Erwann Abalea eaba...@gmail.com wrote: Le dimanche 15 mars 2015

Re: Certificate Profiles

2015-03-16 Thread Erwann Abalea
Le lundi 16 mars 2015 19:30:47 UTC+1, Peter Bowen a écrit : On Mon, Mar 16, 2015 at 10:52 AM, Erwann Abalea eaba...@gmail.com wrote: Le dimanche 15 mars 2015 01:59:10 UTC+1, Peter Bowen a écrit : I've been trying to figure out what is required, forbidden, and optional for X.509 certificates