Re: common name for https certificates in embedded devices

2006-11-18 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clem Taylor schrieb: > Hi, Hello Clem, > Firefox seems to accept the subjectAltName extension, but I'm having > troubles getting firefox to trust the additional level of certificate > hierarchy. [...] > Root CA cert (self signed) [added to trust stor

Re: common name for https certificates in embedded devices

2006-11-17 Thread Clem Taylor
Hi, Firefox seems to accept the subjectAltName extension, but I'm having troubles getting firefox to trust the additional level of certificate hierarchy. I started out with something that looks like: Root CA cert (self signed) [added to trust store on browser] Device CA cert (signed by Root CA

Re: common name for https certificates in embedded devices

2006-11-15 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clem Taylor schrieb: > Hi, Hello Clem, > It seems silly that the browser is putting so much trust > into DNS or an IP address. I'm hoping someone knows of a better > solution to this problem. No the other way around: It assumes the user want to acces