Re: [Ejbca-develop] [ejbca - ejbca-develop] RE: Firefox PKCS11 enrollment

[ejbca-support <ejb...@pr...>]

On 2012-10-24 07:06, SourceForge.net wrote:
> 
> Read and respond to this message at: 
> https://sourceforge.net/projects/ejbca/forums/forum/132019/topic/6046391
> By: 
> 
> Hi,
> Thanks for reply. Yes I used <keygen> that is a part of HTML5 and it works.
> But the JavaScript Crypto class has more flexibility. For example I can specify
> key length in code.
> I wrote a servlet that get the certificate from CA via Web Service and I know
> that I should change the format of returned certificate and then pass it to
> browser (JavaScript). But unfortunately I couldn't find good sample code or
> library for converting to CMMF.
> The best thing that I found is "org.mozilla.jss.pkix.cmmf" package
> (http://www.mozilla.org/projects/security/pki/jss/javadoc/org/mozilla/jss/pkix/c
> mmf/package-summary.html), but it is so complex ;-) . Do you have any good sample
> from this package for converting CMMF response?

The problem remains: CMMF isn't a properly standardized format and isn't supported
by any crypto library as far as I can see.  The only good solution I can think of
is asking Mozilla for advice or reading the actual import code.  I assume that
it is actually turns out to be quite simple when you find it :-)

Cheers,
Anders
tech support

> 
> 
> 
> _____________________________________________________________________________________
> You are receiving this email because you elected to monitor this topic or entire forum.
> To stop monitoring this topic visit: 
> https://sourceforge.net/projects/ejbca/forums/forum/132019/topic/6046391/unmonitor
> To stop monitoring this forum visit: 
> https://sourceforge.net/projects/ejbca/forums/forum/132019/unmonitor
>