Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Should we create a Web API for importing PKCS 12

39 views
Skip to first unread message

Yoshi Huang

unread,
May 15, 2013, 5:35:21 AM5/15/13
to dev-tec...@lists.mozilla.org
Hi,

Currently on Firefox OS (B2G), there's no Web API could install PKCS 12.

The use cases could be Wifi, VPN,... etc.
Some examples can be found on Android, see [1]

Although I have found WebCrypto in the wiki and bugzilla,
but it seems it didn't support pkcs12, right?

Also I found that NSS would use XUL to show some UI (i.e. password)
But XUL is definitely not a good opinion on Firefox OS.

So my question is should we create some Web API for managine those
certificates/pkcs12 .. etc ?
or something like expose nsIX509CertDB.idl to the web?


Thanks

[1]: http://support.google.com/android/bin/answer.py?hl=en&answer=1649774

--
Yoshi Huang, Mozilla Taiwan
allsta...@mozilla.com

Anders Rundgren

unread,
May 15, 2013, 7:44:32 AM5/15/13
to mozilla's crypto code discussion list, Yoshi Huang
On 2013-05-15 11:35, Yoshi Huang wrote:
> Hi,
>
> Currently on Firefox OS (B2G), there's no Web API could install PKCS 12.
>
> The use cases could be Wifi, VPN,... etc.
> Some examples can be found on Android, see [1]
>
> Although I have found WebCrypto in the wiki and bugzilla,
> but it seems it didn't support pkcs12, right?
>
> Also I found that NSS would use XUL to show some UI (i.e. password)
> But XUL is definitely not a good opinion on Firefox OS.

Firefox OS needs a completely revamped PKI-client, the existing
PKI-client doesn't support BYOD, consumer-PKI or payments.

The enrollment solution (keygen) is relic from 1995.

Anders

Rajesh kareti gmail

unread,
May 15, 2013, 7:56:36 AM5/15/13
to mozilla's crypto code discussion list, Yoshi Huang, mozilla's crypto code discussion list
Hello

Good Morning!

I have a question about the JSS library.

I am using JSSProvider for proving security to the javax crypto stuff. I want to enable the fips mode? can any one suggest me the best way?
> --
> dev-tech-crypto mailing list
> dev-tec...@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-tech-crypto

Rajesh Kareti

unread,
Jun 25, 2013, 2:00:15 PM6/25/13
to helpcrypto helpcrypto, mozilla's crypto code discussion list, Yoshi Huang
Hello,

I am willing to use SunPKCS11 provider. But we have a requirement to use
the Open Source FIPS compliance for doing Cryptography stuff.

Please suggest me any Open Source FIPS Compliance?

Thank you,
Rajesh Kareti.


On Thu, May 30, 2013 at 8:31 AM, helpcrypto helpcrypto <helpc...@gmail.com
> wrote:

> Rajesh: I suggest you to avoid JSS, as is quite "abandoned".
> Consider using SunPKCS11 provider instead ;)
--
*Thanks & Regards,*
*Rajesh Kareti*
*571-512-0105*

seajay...@gmail.com

unread,
Dec 23, 2013, 3:45:53 PM12/23/13
to
This web link is broken--have Google hidden this issue?

On Wednesday, May 15, 2013 5:35:21 AM UTC-4, Yoshi Huang wrote:

> Some examples can be found on Android, see [1]
>

>
> [1]: http://support.google.com/android/bin/answer.py?hl=en&answer=1649774
>
0 new messages