RE: Question for CA representatives about PKCS#10 CSRs you accept

2010-07-21 Thread Varga Viktor
: dev-tech-crypto-bounces+varga_v=netlock...@lists.mozilla.org [mailto:dev-tech-crypto-bounces+varga_v=netlock...@lists.mozilla.org] On Behalf Of Nelson B Bolyard Sent: Thursday, June 17, 2010 8:46 PM To: mozilla's crypto code discussion list Subject: Question for CA representatives about PKCS

Re: Question for CA representatives about PKCS#10 CSRs you accept

2010-07-21 Thread aerowolf
I can tell you that Eddy Nigg's (Startcom) system drops all ATTRIBUTE requests, relying on the CSR simply as a means of knowing what the public key is and proof of possession of the private key. and believe me, it'd be much easier if it didn't. -Kyle H On Thu, Jun 17, 2010 at 11:45 AM,

Question for CA representatives about PKCS#10 CSRs you accept

2010-06-17 Thread Nelson B Bolyard
I have a question for CAs that accept PKCS#10 CSRs. Background: PKCS#10 certificate requests may contain an optional set of ATTRIBUTEs. One type of ATTRIBUTE, the only type mentioned in PKCS#10, is the PKCS#9 certificate Extension Request. But PKCS#10 suggests that other types could be defined,