RealEnder / signTextLSF

WebExtension implementing crypto.signText() over LSF
1 stars 0 forks source link

Use Windows/Firefox keystore in certificate chooser #15

Open user890104 opened 7 years ago

user890104 commented 7 years ago

Is it possible to list not only PCKS#11 certificates, but also the operating system's ones, and somehow access Firefox's keystore (to emulate how like signText worked initially). This will make it possible to sign payment orders in some banks' online systems, if the client does not have a smartcard but only a bank-issued certificate in a software store.

RealEnder commented 7 years ago

Firefox store access is not possible without big effort to support different versions. Under windows, LSF supports CryptoAPI keys - no need for PKCS#11 at all. So if the client certificate is imported in windows keystore it will work. @plnb, can you elaborate further?