<html> <head> <meta name="generator" content="Windows Mail 17.5.9600.20498"> <style type="text/css"></style><style data-externalstyle="true"></style></head> <body dir="ltr"> <div data-externalstyle="false" dir="ltr" style="font-family: 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif';font-size:12pt;"><div>Christina,</div><div><br></div><div>Thank you so much for the help! :-)</div><div><br></div><div>Steven<br></div><div data-signatureblock="true"><br></div><div style="padding-top: 5px; border-top-color: rgb(229, 229, 229); border-top-width: 1px; border-top-style: solid;"><div><font face=" 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif'" style='line-height: 15pt; letter-spacing: 0.02em; font-family: "Calibri", "Segoe UI", "Meiryo", "Microsoft YaHei UI", "Microsoft JhengHei UI", "Malgun Gothic", "sans-serif"; font-size: 12pt;'><b>From:</b> <a href="mailto:pki-users-request@redhat.com" target="_parent">pki-users-request@redhat.com</a><br><b>Sent:</b> ‎Tuesday‎, ‎July‎ ‎1‎, ‎2014 ‎11‎:‎00‎ ‎AM<br><b>To:</b> <a href="mailto:pki-users@redhat.com" target="_parent">pki-users@redhat.com</a></font></div></div><div><br></div><div dir=""><div id="readingPaneBodyContent">Send Pki-users mailing list submissions to<br> pki-users@redhat.com<br><br>To subscribe or unsubscribe via the World Wide Web, visit<br> https://www.redhat.com/mailman/listinfo/pki-users<br>or, via email, send a message with subject or body 'help' to<br> pki-users-request@redhat.com<br><br>You can reach the person managing the list at<br> pki-users-owner@redhat.com<br><br>When replying, please edit your Subject line so it is more specific<br>than "Re: Contents of Pki-users digest..."<br><br><br>Today's Topics:<br><br> 1. Re: ECC entity certificate signing and Dogtag (Christina Fu)<br><br><br>----------------------------------------------------------------------<br><br>Message: 1<br>Date: Mon, 30 Jun 2014 11:15:24 -0700<br>From: Christina Fu <cfu@redhat.com><br>To: pki-users@redhat.com<br>Subject: Re: [Pki-users] ECC entity certificate signing and Dogtag<br>Message-ID: <53B1A93C.5090005@redhat.com><br>Content-Type: text/plain; charset="iso-8859-1"; Format="flowed"<br><br>Hi Steven,<br>NSS softtoken provides ECC on F20 out of box <br>(https://bugzilla.redhat.com/show_bug.cgi?id=1019244 ).<br><br>During installation, you just want to make sure that you select the <br>right option accordingly.<br><br>On the client side, the current firefox version supports CRMF key gen <br>with EC. You can try it on one of the enrollment profiles at the EE port.<br> From the CLI, certutil works well. You can do something like the <br>following to get PKCS#10:<br>certutil -d . -R -k ec -q nistp256 -s "CN=test2014" -a -o req.test2014<br><br>Christina<br><br>On 06/27/2014 10:02 AM, sbernst@gmail.com wrote:<br>> Hi there... It has been suggested that this is likely a question for <br>> CFU (Christina).<br>><br>> How and where do I get the libraries to get ECC working on DogTag on <br>> FC20? Specifically looking to sign client side generated PKCS#10 key <br>> blobs. The Dogtag 10 release from 17 Jan 2013 suggested that this <br>> might be supported, but Info from the link below says that, "Certicom <br>> software tokens could not be used because of an issue with malformed <br>> private keys."<br>> https://www.redhat.com/archives/pki-users/2013-January/msg00001.html<br>><br>> So what all is required to sign ECC generated requests? (not planning <br>> on use of TMS interface at this point). I saw that bug Bug 986831 says <br>> that, "Some tools are broken for ECC with NSS token alone," (from the <br>> 10.1 release announcement from November of last year <br>> https://www.redhat.com/archives/pki-users/2013-November/msg00001.html) <br>> <https://www.redhat.com/archives/pki-users/2013-November/msg00001.html%29> <br>> but I'm not authorized to view its details. (I mention this to <br>> demonstrate that I'm trying to do my homework on this issue before <br>> asking for help.)<br>><br>> Thank you so much, in advance, for any and all help.<br>><br>> - Steven<br>><br>><br>> _______________________________________________<br>> Pki-users mailing list<br>> Pki-users@redhat.com<br>> https://www.redhat.com/mailman/listinfo/pki-users<br><br>-------------- next part --------------<br>An HTML attachment was scrubbed...<br>URL: <https://www.redhat.com/archives/pki-users/attachments/20140630/3e54f20f/attachment.html><br><br>------------------------------<br><br>_______________________________________________<br>Pki-users mailing list<br>Pki-users@redhat.com<br>https://www.redhat.com/mailman/listinfo/pki-users<br><br>End of Pki-users Digest, Vol 76, Issue 1<br>****************************************<br></div></div></div> </body> </html>