Re: Problems importing PKCS #12 client certs

2010-03-07 Thread aerowolf
On Thu, Mar 4, 2010 at 6:42 AM, Eddy Nigg eddy_n...@startcom.org wrote: Chris Hills wrote: Perhaps there is place for a fork of firefox (perhaps an enterprise version) that uses the windows certificate store and dispenses with the local certificate store. I understand that support for MSI

Re: Problems importing PKCS #12 client certs

2010-03-07 Thread Eddy Nigg
On 03/07/2010 11:23 AM, aerow...@gmail.com: On Thu, Mar 4, 2010 at 6:42 AM, Eddy Nigg eddy_n...@startcom.org wrote: I think it would make much, much more sense to use the OS store for private keys across all Firefox versions ! Yes, and with a compromise of the system you'd also loose those

Re: Problems importing PKCS #12 client certs

2010-03-07 Thread Martin Paljak
On Mar 7, 2010, at 15:45 , Eddy Nigg wrote: On 03/07/2010 11:23 AM, aerow...@gmail.com: On Thu, Mar 4, 2010 at 6:42 AM, Eddy Nigg eddy_n...@startcom.org wrote: Yes, and with a compromise of the system you'd also loose those installed at the Mozilla applications. Not nice :S Well, no, not

Re: Problems importing PKCS #12 client certs

2010-03-05 Thread Wan-Teh Chang
On Thu, Mar 4, 2010 at 1:59 AM, Jean-Marc Desperrier jmd...@gmail.com wrote: I think it would make much, much more sense to use the OS store for private keys across all Firefox versions ! This is the strategy followed by Chrome. In fact, there is code to do that in NSS but I'm afraid it's

Re: Problems importing PKCS #12 client certs

2010-03-04 Thread Jean-Marc Desperrier
Chris Hills wrote: Perhaps there is place for a fork of firefox (perhaps an enterprise version) that uses the windows certificate store and dispenses with the local certificate store. I understand that support for MSI installation is already being worked on. I think it would make much, much

Re: Problems importing PKCS #12 client certs

2010-03-03 Thread Gen Kanai
On 2/17/10 9:42 AM, Wan-Teh Chang wrote: On Sun, Feb 14, 2010 at 6:57 PM, Subrata Mazumdar subrata.mazum...@ieee.org wrote: Hi, My experience so far is that PSM Certificate Manager is never launched when PKCS#12 link is clicked. Not on Windows. Not on Linux (as described by the bug

Re: Problems importing PKCS #12 client certs

2010-03-03 Thread Eddy Nigg
On 03/03/2010 10:08 PM, Gen Kanai: I have been told that Firefox is the only one of the 5 major desktop browsers that functions in the way that it does (i.e. the other browsers all have handlers for application/x-pkcs12.) Lets seeInternet Explorer (obviously), Safari and Chrome. Which

Re: Problems importing PKCS #12 client certs

2010-03-03 Thread Wan-Teh Chang
2010/3/3 Eddy Nigg eddy_n...@startcom.org: Lets seeInternet Explorer (obviously), Safari and Chrome. Which other major browser? :-) It's Opera. Gen: I agree that Firefox should have a handler for application/x-pkcs12 that imports a PKCS #12 file into the NSS certificate/key databases.

Re: Problems importing PKCS #12 client certs

2010-02-22 Thread Chris Hills
On 15/02/2010 02:57, Subrata Mazumdar wrote: Since IE and Chrome (do not know about Safari and Opera) uses the same Windows Crypto DB/Manager, the imported keys/certificates in PKCS#12 is always visible to both browsers. FF does not uses Windows CertDB - FF uses it's own CertDB. As a result,

Re: Problems importing PKCS #12 client certs

2010-02-17 Thread Wan-Teh Chang
On Sun, Feb 14, 2010 at 6:57 PM, Subrata Mazumdar subrata.mazum...@ieee.org wrote: Hi, My experience so far is that PSM Certificate Manager is never launched when PKCS#12 link is clicked. Not on Windows. Not on Linux (as described by the bug filer). Do not remember for Mac OS X. Here is

Problems importing PKCS #12 client certs

2010-02-14 Thread Gen Kanai
Hello everyone, Bug 542441 claims that Gecko/Firefox is not importing PKCS#12 client certs. https://bugzilla.mozilla.org/show_bug.cgi?id=542441 I am also being told by the bug filer that IE, Opera, Chrome and Safari have no problems importing PKCS#12 certs. Could those of you who have more

Re: Problems importing PKCS #12 client certs

2010-02-14 Thread Subrata Mazumdar
Hi, My experience so far is that PSM Certificate Manager is never launched when PKCS#12 link is clicked. Not on Windows. Not on Linux (as described by the bug filer). Do not remember for Mac OS X. Here is what I think is the explanation for the behavior on windows: On Windows PKCS#12 file