Re: Restricting SSL cert issuance within specified domain

2010-06-02 Thread Kathleen Wilson
On 6/1/10 2:05 PM, Nelson B Bolyard wrote: On 2010/06/01 11:38 PDT, Kathleen Wilson wrote: Is there support in NSS to restrict an intermediate CA to only be able to issue SSL certificates within a specified domain? Yes, the issuer of the intermediate CA cert can constrain the names that may

RE: Restricting SSL cert issuance within specified domain

2010-06-02 Thread Ryan Sleevi
That's great news! Is there a corresponding bug number or other way I can track the progress to see which version of NSS it gets into? https://bugzilla.mozilla.org/show_bug.cgi?id=394919 -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org

Re: Restricting SSL cert issuance within specified domain

2010-06-02 Thread Kathleen Wilson
On 6/2/10 11:13 AM, Ryan Sleevi wrote: That's great news! Is there a corresponding bug number or other way I can track the progress to see which version of NSS it gets into? https://bugzilla.mozilla.org/show_bug.cgi?id=394919 Excellent! Thanks! Kathleen -- dev-tech-crypto mailing list

Re: Restricting SSL cert issuance within specified domain

2010-06-01 Thread Nelson B Bolyard
On 2010/06/01 11:38 PDT, Kathleen Wilson wrote: Is there support in NSS to restrict an intermediate CA to only be able to issue SSL certificates within a specified domain? Yes, the issuer of the intermediate CA cert can constrain the names that may appear in certificates issued by that