Re: [Fed-Talk] Installing NMCI Root Certs on Mac
Re: [Fed-Talk] Installing NMCI Root Certs on Mac
- Subject: Re: [Fed-Talk] Installing NMCI Root Certs on Mac
- From: "Timothy J. Miller" <email@hidden>
- Date: Mon, 17 Jul 2006 08:24:34 -0500
Shawn Geddis wrote:
No need to "Install Root Certs" for NMCI. Mac OS X 10.4.x already has
the DoD Trusted Root CA Certificates in the X509Anchors keychain which
contains all of the Trusted Root CA Certificates used by the OS.
You may need to install the DoD Root CA 2 and the new intermediate CAs,
however. Paul's email covers a how-to well enough, but you'll still
need a source for certs. I don't know if NMCI or SPAWAR have a PKI
webpage, but you can certainly download them from the AF PKI SPO (.mil
restricted) at https://afpki.lackland.af.mil
Both Microsoft and Apple enforce the ratified RFCs relevant to S/MIME
which requires that everything to the left of the "@" is exactly the
same and is case-sensitive, hence you will not be able to override that
you need to send from the same email account that is identified in your
certificate.
Don't get me started, Shawn. ;) (For the interested, the RFC provides
for overriding the match requirements with the caveat that you really
know what you're doing, and in the AF we have an operational need for
it. While I don't know if Entourage supports this override, Outlook
does but Mail.app does not and Shawn & I have gone at that issue hammer
& tongs in the past.)
-- Tim
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden