[Pki-users] This version of Firefox no longer supports the crypto web object...

[Fraser Tweedale]

On Tue, Sep 08, 2015 at 09:58:20AM +0300, Aleksey Chudov wrote:
> Thank you for the clarification!
> 
> Do you have a Track ticket on this issue? I can't find it.
> 
#1285 "generateCRMFRequest() removed from Firefox" [1] seems to
cover it - specifically the option:

  (a) fix this profile

Option:

  (b) supply a CLI for CRMF requests

was probably addressed by #1074 "CLI for CRMF" [2].

[1] https://fedorahosted.org/pki/ticket/1285
[2] https://fedorahosted.org/pki/ticket/1074

Cheers,
Fraser

> 
> On Tue, Sep 8, 2015 at 6:23 AM, Fraser Tweedale <ftweedal at redhat.com> wrote:
> 
> > On Mon, Sep 07, 2015 at 03:03:03PM +0300, Aleksey Chudov wrote:
> > > Hi,
> > >
> > > I use Firefox 40.0.3 from Fedora 21 updates repository
> > >
> > > $ rpm -q firefox
> > > firefox-40.0.3-1.fc21.x86_64
> > >
> > > Every PKI CA certificate profile containing keyGenInputImpl input
> > produces
> > > warning message on a web page:
> > >
> > > Warning: This version of Firefox no longer supports the crypto web object
> > > used to generate and archive keys from the browser. As a result expect
> > > limited functionality in this area.
> > >
> > > But actually key generation works in my Firefox version.
> > >
> > > What does this warning really mean?
> > >
> > It means that Firefox's API changed.  The old, custom keygen /
> > crypto API was deprecated for a long time, then removed, but the
> > new, standardised Web Crypto API is not supported by Dogtag yet.
> >
> > Hope that clarifies the situation for you.
> >
> > Cheers,
> > Fraser
> >
> > > Aleksey
> >
> > > _______________________________________________
> > > Pki-users mailing list
> > > Pki-users at redhat.com
> > > https://www.redhat.com/mailman/listinfo/pki-users
> >
> >