Hi, I use Firefox 40.0.3 from Fedora 21 updates repository $ rpm -q firefox firefox-40.0.3-1.fc21.x86_64 Every PKI CA certificate profile containing keyGenInputImpl input produces warning message on a web page: Warning: This version of Firefox no longer supports the crypto web object used to generate and archive keys from the browser. As a result expect limited functionality in this area. But actually key generation works in my Firefox version. What does this warning really mean?

Aleksey

_______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users

Thank you for the clarification! Do you have a Track ticket on this issue? I can't find it.

On Tue, Sep 8, 2015 at 6:23 AM, Fraser Tweedale <ftweedal(a)redhat.com&gt; wrote: > On Mon, Sep 07, 2015 at 03:03:03PM +0300, Aleksey Chudov wrote: > > Hi, > > > > I use Firefox 40.0.3 from Fedora 21 updates repository > > > > $ rpm -q firefox > > firefox-40.0.3-1.fc21.x86_64 > > > > Every PKI CA certificate profile containing keyGenInputImpl input > produces > > warning message on a web page: > > > > Warning: This version of Firefox no longer supports the crypto web object > > used to generate and archive keys from the browser. As a result expect > > limited functionality in this area. > > > > But actually key generation works in my Firefox version. > > > > What does this warning really mean? > > > It means that Firefox's API changed. The old, custom keygen / > crypto API was deprecated for a long time, then removed, but the > new, standardised Web Crypto API is not supported by Dogtag yet. > > Hope that clarifies the situation for you. > > Cheers, > Fraser > > > Aleksey > > > _______________________________________________ > > Pki-users mailing list > > Pki-users(a)redhat.com > > https://www.redhat.com/mailman/listinfo/pki-users > >