This version of Firefox no longer supports the crypto web object...
Hi, I use Firefox 40.0.3 from Fedora 21 updates repository $ rpm -q firefox firefox-40.0.3-1.fc21.x86_64 Every PKI CA certificate profile containing keyGenInputImpl input produces warning message on a web page: Warning: This version of Firefox no longer supports the crypto web object used to generate and archive keys from the browser. As a result expect limited functionality in this area. But actually key generation works in my Firefox version. What does this warning really mean? Aleksey
On Mon, Sep 07, 2015 at 03:03:03PM +0300, Aleksey Chudov wrote:
Hi,
I use Firefox 40.0.3 from Fedora 21 updates repository
$ rpm -q firefox firefox-40.0.3-1.fc21.x86_64
Every PKI CA certificate profile containing keyGenInputImpl input produces warning message on a web page:
Warning: This version of Firefox no longer supports the crypto web object used to generate and archive keys from the browser. As a result expect limited functionality in this area.
But actually key generation works in my Firefox version.
What does this warning really mean?
It means that Firefox's API changed. The old, custom keygen / crypto API was deprecated for a long time, then removed, but the new, standardised Web Crypto API is not supported by Dogtag yet. Hope that clarifies the situation for you. Cheers, Fraser
Aleksey
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
Thank you for the clarification! Do you have a Track ticket on this issue? I can't find it. On Tue, Sep 8, 2015 at 6:23 AM, Fraser Tweedale <ftweedal@redhat.com> wrote:
Hi,
I use Firefox 40.0.3 from Fedora 21 updates repository
$ rpm -q firefox firefox-40.0.3-1.fc21.x86_64
Every PKI CA certificate profile containing keyGenInputImpl input
On Mon, Sep 07, 2015 at 03:03:03PM +0300, Aleksey Chudov wrote: produces
warning message on a web page:
Warning: This version of Firefox no longer supports the crypto web object used to generate and archive keys from the browser. As a result expect limited functionality in this area.
But actually key generation works in my Firefox version.
What does this warning really mean?
It means that Firefox's API changed. The old, custom keygen / crypto API was deprecated for a long time, then removed, but the new, standardised Web Crypto API is not supported by Dogtag yet.
Hope that clarifies the situation for you.
Cheers, Fraser
Aleksey
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
On Tue, Sep 08, 2015 at 09:58:20AM +0300, Aleksey Chudov wrote:
Thank you for the clarification!
Do you have a Track ticket on this issue? I can't find it.
#1285 "generateCRMFRequest() removed from Firefox" [1] seems to cover it - specifically the option: (a) fix this profile Option: (b) supply a CLI for CRMF requests was probably addressed by #1074 "CLI for CRMF" [2]. [1] https://fedorahosted.org/pki/ticket/1285 [2] https://fedorahosted.org/pki/ticket/1074 Cheers, Fraser
On Tue, Sep 8, 2015 at 6:23 AM, Fraser Tweedale <ftweedal@redhat.com> wrote:
Hi,
I use Firefox 40.0.3 from Fedora 21 updates repository
$ rpm -q firefox firefox-40.0.3-1.fc21.x86_64
Every PKI CA certificate profile containing keyGenInputImpl input
On Mon, Sep 07, 2015 at 03:03:03PM +0300, Aleksey Chudov wrote: produces
warning message on a web page:
Warning: This version of Firefox no longer supports the crypto web object used to generate and archive keys from the browser. As a result expect limited functionality in this area.
But actually key generation works in my Firefox version.
What does this warning really mean?
It means that Firefox's API changed. The old, custom keygen / crypto API was deprecated for a long time, then removed, but the new, standardised Web Crypto API is not supported by Dogtag yet.
Hope that clarifies the situation for you.
Cheers, Fraser
Aleksey
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
participants (2)
-
Aleksey Chudov -
Fraser Tweedale