209347 - Obtain S/Mime sender's (prefered) encryption certificate

Status: NEW

(NSS :: Libraries, enhancement, P4)

Description

[Kai Engert [:KaiE:]]

This bug requests to implement a new functionality in NSS.

When processing a received S/Mime message, there should be an API to obtain the
sender's encryption certificate - which might be same certificate as the
signature, another certificate with the same subject, or even a completely
different certificate.

See also
  http://www.ietf.org/rfc/rfc2633.txt
section 2.5.3 Encryption Key Preference Attribute


The requirement for this came up in the context of bug 209182, which will
require the application to import certificates itself.

Without this function, the application will have to implement the required logic
on its own.