67000 - RFE: Make it so RSA source comparisons can be made using certificates

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Java: OJI, enhancement, P4)

Description

[edburns]

Currently, there is no way to verify the security of data from a source using 
RSA certificates.  This bug is to make it so one can do this.

Comment 1

[edburns]

bugtraq bug 4409532

Comment 2

[Jeff Dyer]

What we need is a Java SDK method that returns the RSA file of a signed jar. 
This is passed to the psm function

    NS_IMETHODIMP nsPSMComponent::VerifySignature(
            const char* aRSABuf, PRUint32 aRSABufLen, 
            const char* aPlaintext, PRUint32 aPlaintextLen,
            PRInt32* aErrorCode, nsIPrincipal** aPrincipal)

(in ./mozilla/extensions/psm-glue/src/PSMComponent.cpp) 

to get a CertificatePrincipal, which can in turn is used to do same source 
comparisions with CertificatePrincipals generated from signed pages.

Comment 3

[edburns]

Adding JPIBUG and closing as INVALID.

Comment 4

[edburns]

Re-opening, this requires work on the SUN and MOZILLA side.

Comment 5

[edburns]

Stanley put this down to four.

Comment 6

[shrirang khanzode]

SPAM: reassigning all OJI bugs to new OJI QA, pmac ( 227 bugs)

Comment 7

[Patty Mac]

Chris Petersen is a new QA contact for oji component. His email is:
[e-mail]

Comment 8

[Matthias Versen [:Matti]]

fixing small error for [e-mail] (filter with : SPAMMAILSUCKS)

Comment 9

[Joshua Xia]

reassign to me

Comment 10

[Joshua Xia]

->kyle

Comment 11

[Pete Zha]

mass reassign to Alfred

Comment 12

[Benjamin Smedberg]

Mass-closing bugs in the "OJI" component: OJI plugin integration was replaced with npruntime long ago, and these bugs appear to be irrelevant now. If there is in fact a real bug that remains, please file it new in the "Core" product, component "Plug-ins".