Re: Debug build

2008-05-14 Thread Kai Engert
I have one on my local system. Kai Eddy Nigg (StartCom Ltd.) wrote: Has anybody a debug build running somewhere as described at http://wiki.mozilla.org/PSM:EV_Testing ? I'd like to ask for a small favor before tinkering with my own build... ___

Re: Debug build

2008-05-14 Thread Eddy Nigg (StartCom Ltd.)
Eddy Nigg (StartCom Ltd.): Hi Kai, Kai Engert: I have one on my local system. Kai Could you make a small test by using the OID 1.3.6.1.4.1.23223.1.1.5 and our root (Sha1 3E:2B:F7:F2:03:1B:96:F3:8C:E6:C4:D8:A8:5D:3E:2D:58:47:6A:0F )and access the site https://ev.mediahost.org/ for

OCSP checking for intermediate and root CAs

2008-05-14 Thread Eddy Nigg (StartCom Ltd.)
During recent testing I suspect that intermediate CA certificates which have an OCSP URI value in the AIA extension aren't looked up at the OCSP server even with the settings to do so (Using FF3). Is this behavior correct? Is it expected and by design? Else? -- Regards Signer: Eddy

Re: OCSP checking for intermediate and root CAs

2008-05-14 Thread Eddy Nigg (StartCom Ltd.)
Eddy Nigg (StartCom Ltd.): During recent testing I suspect that intermediate CA certificates which have an OCSP URI value in the AIA extension aren't looked up at the OCSP server even with the settings to do so (Using FF3). Is this behavior correct? Is it expected and by design? Else?

Re: OCSP checking for intermediate and root CAs

2008-05-14 Thread Nelson B Bolyard
Eddy Nigg (StartCom Ltd.): During recent testing I suspect that intermediate CA certificates which have an OCSP URI value in the AIA extension aren't looked up at the OCSP server even with the settings to do so (Using FF3). Is this behavior correct? Is it expected and by design? Else? In all

Re: OCSP checking for intermediate and root CAs

2008-05-14 Thread Eddy Nigg (StartCom Ltd.)
Nelson B Bolyard: In all versions of Mozilla browsers shipped to date, OCSP checking is only done for EE (leaf, server) certs, not for CA certs. However, beginning in Firefox 3, for EV certs only, all certs in the chain that have OCSP AIA extensions are checked with OCSP. OK, than my