cryptoapi

[plm...@gmail.com]

Hello,

Is it possible to use new versions of mozilla/firefox with the windows
cryptoapi? My company uses a proprietary product for certificate
management, preventing me to import them into firefox. I can only
access the certificates through the cryptoapi :( and hope to be able to
continue using firefox.

[Bob Relyea]

plm...@gmail.com wrote:

>_______________________________________________
>mozilla-crypto mailing list
>mozilla...@mozilla.org
>http://mail.mozilla.org/listinfo/mozilla-crypto
>
>
Because mozilla/firefox is a cross platform product, we it doesn't use
proprietary interfaces (CAPI isn't available on the mac, or instance).
Most vendors provide PKCS #11 modules as well as capi modules. PKCS #11
(also known as cryptoki) is an industry standard for pluggable crypto.
Mozilla and firefox support this interface.

bob

[Nelson B]

Bob Relyea wrote:
> plm...@gmail.com wrote:
>
>> Hello,
>>
>> Is it possible to use new versions of mozilla/firefox with the windows
>> cryptoapi? My company uses a proprietary product for certificate
>> management, preventing me to import them into firefox. I can only
>> access the certificates through the cryptoapi :( and hope to be able to
>> continue using firefox.

> Because mozilla/firefox is a cross platform product, we it doesn't use

> proprietary interfaces (CAPI isn't available on the mac, or instance).
> Most vendors provide PKCS #11 modules as well as capi modules. PKCS #11
> (also known as cryptoki) is an industry standard for pluggable crypto.
> Mozilla and firefox support this interface.

There exists a cryptoapi provider that turns (almost) any PKCS11 module
into a cryptoapi provider. It should be possible to write a PKCS11
module that turns (almost) any cryptoapi provider into a PKCS11 module,
but I'm not aware of any such implementation at the time of this writing.
Maybe someone will contribute such a thing, or be willing to pay a
developer to develop such a thing. Or maybe someone knows of one and
will tell us all about it.

[Christoph Brueckner]

> There exists a cryptoapi provider that turns (almost) any PKCS11 module
> into a cryptoapi provider.

That sounds interesting. I am searching for such a thing for a while.
Can you tell me the name of this product or where to get more information
about the pkcs#11->cryptoapi provider?

regards

Christoph

[Nelson B]

Contact ques...@identityalliance.com or see
http://www.identityalliance.com/company.html

[plm]

Sounds promising, but I was looking for one for pure personal reasons
(in order to avoid having to use IE for our internal company intranet)
so I can't really pay a developer to do it. If only I had time
myself...

Thanks for your answer however.