On Tue, Sep 08, 2015 at 09:58:20AM +0300, Aleksey Chudov wrote:
Thank you for the clarification!
Do you have a Track ticket on this issue? I can't find it.
#1285 "generateCRMFRequest() removed from Firefox" [1] seems to
cover it - specifically the option:
(a) fix this profile
Option:
(b) supply a CLI for CRMF requests
was probably addressed by #1074 "CLI for CRMF" [2].
[1]
https://fedorahosted.org/pki/ticket/1285
[2]
https://fedorahosted.org/pki/ticket/1074
Cheers,
Fraser
On Tue, Sep 8, 2015 at 6:23 AM, Fraser Tweedale <ftweedal(a)redhat.com> wrote:
> On Mon, Sep 07, 2015 at 03:03:03PM +0300, Aleksey Chudov wrote:
> > Hi,
> >
> > I use Firefox 40.0.3 from Fedora 21 updates repository
> >
> > $ rpm -q firefox
> > firefox-40.0.3-1.fc21.x86_64
> >
> > Every PKI CA certificate profile containing keyGenInputImpl input
> produces
> > warning message on a web page:
> >
> > Warning: This version of Firefox no longer supports the crypto web object
> > used to generate and archive keys from the browser. As a result expect
> > limited functionality in this area.
> >
> > But actually key generation works in my Firefox version.
> >
> > What does this warning really mean?
> >
> It means that Firefox's API changed. The old, custom keygen /
> crypto API was deprecated for a long time, then removed, but the
> new, standardised Web Crypto API is not supported by Dogtag yet.
>
> Hope that clarifies the situation for you.
>
> Cheers,
> Fraser
>
> > Aleksey
>
> > _______________________________________________
> > Pki-users mailing list
> > Pki-users(a)redhat.com
> >
https://www.redhat.com/mailman/listinfo/pki-users
>
>