bug 247305 - Remove some obsolete files from en-US directory. These files are unused in the current build.

git-svn-id: svn://10.0.0.236/trunk@159847 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
rlk%trfenv.com 2004-07-26 00:56:35 +00:00
parent cf1ed8c211
commit fbc999ba70
8 changed files with 0 additions and 7273 deletions

View File

@ -1,19 +0,0 @@
<html>
<head>
<title>Mozilla dialog box Help</title>
<link rel="stylesheet" href="chrome://communicator/locale/help/content_style.css" type="text/css">
<!--link rel="stylesheet" href="../style.css" type="text/css" -->
</head>
<body bgcolor="white">
<p>Content to be supplied.</p>
<hr>
<p><i>Beta Draft</i></p>
</body>
</html>

View File

@ -1,361 +0,0 @@
<html>
<head>
<title>Mozilla Navigator Preferences Help</title>
<link rel="stylesheet" href="chrome://help/locale/content_style.css" type="text/css">
<!-- <link rel="stylesheet" href="../style.css" type="text/css"> -->
</head>
<body>
<a NAME="nav_settings"></a>
<a name="Navigator:preferencesIDX"></a>
<a name="preferences:NavigatorIDX"></a>
<h1>Navigator Preferences</h1>
<p>This section describes how to use the Navigator preference panel. If you are
not already viewing the panel, follow these steps:</p>
<p> 1. Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.<br>
2. Choose Navigator.</p>
<table summary="list of headings" CELLSPACING=2 CELLPADDING=4 WIDTH="324" BGCOLOR="#CCCCCC" >
<tr>
<td class="inthissection">
<p>In this section:
<p><a href="#Navigator">Navigator</a>
<p><a href="#History">History</a>
<p><a href="#Languages">Languages</a>
<p><a href="#Helper">Helper Applications</a>
<p><a href="#Smart">Smart Browsing</a>
<p><a href="#Internet">Internet Search</a>
<p><a href="#Tabbed">Tabbed Browsing</a>
<p><a href="#downloads">Downloads </a>
</td>
</tr>
</table>
<p>&nbsp;</p>
<a name="preferences:NavigatorIDX"></a>
<a name="preferences:default_browserIDX"></a>
<a name="default_browser_preferencesIDX"></a>
<a name="default_browser_preferencesSDX"></a>
<a name="Groupmark_as_home_pageSDX"></a>
<a name="Home_Page_GroupSDX"></a>
<a name="Home_Page_GroupIDX"></a>
<a name="home_pageIDX"></a>
<a name="home_pageSDX"></a>
<a name="buttonsSDX"></a>
<a NAME="Navigator"></a>
<h2>Navigator Preferences - Navigator</h2>
<p>This section describes how to use the main Navigator preferences panel.
If you're not already viewing it, follow these steps:
<p> 1. Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.<br>
2. Click the Navigator category.</p>
<p><br></p>
<p>The Navigator preferences panel allows you to customize three aspects of the browser.
</p>
<ul>
<li><b>When Navigator starts up, display</b>: Choose one of these buttons to
determine what Mozilla displays when it first starts up: </li>
<ul>
<li> <b>Blank page</b>: Causes Navigator to start up without automatically loading
a web page.<br>
</li>
<li><b>Home page</b>: Causes Navigator to load your home page (specified below)
every time it starts up.<br>
</li>
<li><b>Last page visited</b>: Causes Navigator to start up by loading the page
you were viewing right before you last exited Mozilla.</li>
</ul>
<li><b> Default Browser:</b> Allows you to set Mozilla as the default browser
or shows you that it is. </li>
<ul>
<li><b>Set Default Browser: </b>Unless it is greyed out, click this to set Mozilla
as your default browser.</li>
</ul>
<li><b>Home Page</b>: In the field, type the web page you want as your home page
or do one of the following:</li>
<ul>
<li><b>Use Current Page</b>: Click this to use the web page currently displayed
in Navigator as your home page.</li>
<li><b>Use Current Group</b>: If you have two or more Navigator tabs open, click
this to set them as your Home Page Group (a group of tabs that are opened as
your home page). After clicking this button, the message &quot;Home Page Group
is Set&quot; appears in the location field.<br>
&nbsp; <br>
<b>Caution</b>: If you edit the field after clicking Use Current Group, your
Home Page Group will be lost.<br>
&nbsp; <br>
</li>
<li><b>Choose File</b>: Click this to locate a file on disk that you want to
load as your home page. </li>
</ul>
<li><b>Select the buttons you want to see in the toolbars</b>: Select any of
the available checkboxes to see them on your toolbars.<br>
The Go, Search, and Print buttons appear in the Navigation Toolbar near the upper-right
corner of the Navigator window. All other buttons appear in the Personal Toolbar.
For information about adding your own bookmarks to this toolbar, see <a href="customize_help.xhtml#personal_toolbar">Personal
Toolbar</a>.<br>
</ul>
<p>&nbsp;</p><hr>
<a name="preferences:historyIDX"></a>
<a NAME="History"></a>
<h2>Navigator Preferences - History</h2>
<p>
<p>This section describes how to use the History preferences panel.
If you're not already viewing it, follow these steps:
</p>
<p> 1. Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.<br>
2. Under the Navigator category, click History. (If no subcategories
are visible, double-click Navigator to expand the list.)</p>
<p><br></p>
<p>The History preferences panel allows you to configure three history settings on Navigator.</p>
<ul>
<li><b>Browsing History</b>: </li>
<ul>
<li><b>Remember visited pages for the last __ days</b>: Type the number of days
you want Mozilla to keep track of the web pages you have previously visited.
For example, if you set this number to 10 days, pages 10 days old or less will
be kept in the history list. </li>
</ul>
<ul>
<li><b>Clear History</b>: Click this to delete the list of sites visited.</li>
</ul>
<li><b>Location Bar History</b>:</li>
<ul>
<li><b>Clear Location Bar</b>: Click this to clear the list of sites in the Location
bar menu.</li>
</ul>
</ul>
<p>For more information about history in Mozilla, see <a href="nav_help.html#nav_retrace">Retracing Your Steps</a>.<br>
</p>
<p>&nbsp;</p><hr>
<a NAME="languages:Navigator_preferences"></a>
<a name="character_encodingSDX"></a>
<a name="preferences:languagesIDX"></a>
<a name="Languages"></a>
<h2>Navigator Preferences - Languages</h2>
<p>
<p>This section describes how to use the Languages preferences panel.
If you're not already viewing it, follow these steps:
</p>
<p> 1. Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.<br>
2. Under the Navigator category, click Languages. (If no subcategories
are visible, double-click Navigator to expand the list.)</p>
<p><br></p>
<p>The Languages preferences panel allows you to choose the languages and character encoding for displaying web pages:</p>
<ul>
<li><b>Languages for Web Pages</b>: </li>
<ul>
<li><b>Move Up / Move Down</b>: Click one of these buttons to move a selected
language up or down, which sets the order of preference for the listed languages.</li>
<li><b>Add</b>: Click this to add additional languages for displaying web pages.</li>
<li><b>Remove</b>: Click this to remove a selected language. </li>
</ul>
<li><b>Character Encoding:</b> </li>
<ul>
<li><b>Default Character Encoding</b>: Use the drop-down list to select the
character encoding you want for displaying web pages. </li>
</ul>
</ul>
<p>&nbsp;</p><hr>
<a name="opening_filesSDX"></a>
<a name="downloadingSDX"></a>
<a name="downloadSDX"></a>
<a name="preferences:helper_applicationsIDX"></a>
<a name="Helper"></a>
<h2>Navigator Preferences - Helper Applications</h2>
<p>
<p>This section describes how to use the Helper Applications preferences panel.
If you're not already viewing it, follow these steps:
</p>
<p> 1. Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.<br>
2. Under the Navigator category, click Helper Applications. (If no subcategories
are visible, double-click Navigator to expand the list.)</p>
<p><br></p>
<p>The Helper Applications preferences panel allows you set up how different file types are opened by other applications in
Mozilla:</p>
<ul>
<li><b>Specify which application should handle each file type:</b> </li>
<ul>
<li><b>File types</b>: Displays the file types that Mozilla uses. Select one
of them to show the following information: </li>
<ul>
<li><b>Extension</b>:Displays the file extension of the selected file type.</li>
<li><b>MIME type</b>:Displays the MIME type of the selected file type.</li>
<li><b>Handled by</b>: Displays the program that will be used to open each file
of the selected file type.</li>
</ul>
<li><b>New Type</b>: Click this to add a new file type. Type or choose the description,
file extension, MIME type, and application.</li>
<li><b>Edit</b>: Click this to change the file-handling information of a selected
file type.</li>
<li><b>Remove</b>: Click this to remove a selected file type.</li>
</ul>
<li><b>Plug-in Finder Service</b>: Select this to always use the Plugin Finder
Service (PFS) whenever Mozilla needs a new plug-in. If left unselected, the
PFS is only used when a plug-in location is not provided by the web page that
requires the plug-in.</li>
<li><b>Opening files</b>: </li>
<ul>
<li><b>Reset</b>: Click this to clear any file-opening preferences you may have
set by unselecting the &quot;Always ask before opening this type of file&quot;
checkbox in the download dialog box.</li>
</ul>
</ul>
<p>For more information about handling different file types in Mozilla, see <a href="nav_help.html#nav_helperapps">Managing Different File Types</a>.</p>
<p>&nbsp;</p><hr>
<a name="internet_keywordsSDX"></a>
<a name="keywordsSDX"></a>
<a name="whats_relatedSDX"></a>
<a name="autocompleteSDX"></a>
<a name="preferences:smart_browsingIDX"></a>
<a name="Smart"></a>
<h2>Navigator Preferences - Smart Browsing</h2>
<p>
<p>This section describes how to use the Smart Browsing preferences panel.
If you're not already viewing it, follow these steps:
</p>
<p> 1. Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.<br>
2. Under the Navigator category, click Smart Browsing. (If no subcategories
are visible, double-click Navigator to expand the list.)</p>
<p><br></p>
<p>The Smart Browsing preferences panel allows you to better browse web pages
using Internet Keywords, and Location bar autocomplete.</p>
<ul>
<li><b>Internet Keywords</b>: </li>
<ul>
<li><b>Enable Internet Keywords</b>: Select this to enable fast access to services
such as stock quotes, search, and other information from the Location bar.</li>
<li><b>More Information</b>: Click this to learn more about using Internet Keywords.</li>
</ul>
<a id="autocomplete-adv"></a>
<li><b>Location Bar Autocomplete</b>:</li>
<ul>
<li><b>Automatically complete text typed into Location bar</b>: Select this to
automatically complete text you previously entered into the Location bar. </li>
<li><b>Advanced</b>: Click this and select one or more of the following options:
</li>
<ul>
<li><b>Autocomplete best match as you type</b>: As you type in the Location Bar,
Mozilla will automatically complete your web address using the visited website
it most closely matches.</li>
<li><b>Show list of matching results</b>: As you type in the Location Bar, Mozilla
will show a drop-down list of matching visited web addresses.</li>
<li><b>Show internet search engine</b>: Shows a drop-down list item allowing
you to search the default search engine for words you enter.</li>
<li>
<div align="center"><b>Match only website you've typed previously</b>: Shows
only websites that you've typed in the Location Bar and not sites that were
opened in other ways, such as clicking a link on a web page.</div>
</li>
</ul>
</ul>
</ul>
<p>&nbsp;</p><hr>
<a name="search_engineSDX"></a>
<a name="searchSDX"></a>
<a name="preferences:internet_searchIDX"></a>
<a name="Internet"></a>
<h2>Navigator Preferences - Internet Search</h2>
<p>
<p>This section describes how to use the Internet Search preferences panel.
If you're not already viewing it, follow these steps:
</p>
<p> 1. Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.<br>
2. Under the Navigator category, click Internet Search. (If no subcategories
are visible, double-click Navigator to expand the list.)</p>
<p><br></p>
<p>The Internet Search preferences panel allows you to configure how you search using Mozilla:</p>
<ul>
<li><b>Default Search Engine</b>: </li>
<ul>
<li><b>Search using</b>: Use the drop-down list to select the search engine you
want use for web searching.</li>
</ul>
<li><b>Search Results</b>: </li>
<ul>
<li><b>Open the Search tab in the Sidebar when search results are available</b>:
Select this to have Mozilla open the Sidebar and show your search results.</li>
</ul>
<li><b> Sidebar Search Tab Preference</b>: </li>
<ul>
<li><b>Basic</b>: Choose this to use one search engine when searching in Mozilla.
</li>
<li><b>Advanced</b>:<b> </b>Choose this to select one or more search engines
from a list when searching in Mozilla.</li>
</ul>
</ul>
<p>&nbsp;</p>
<hr>
<a name="preferences:Tabbed_BrowsingIDX"></a>
<a name="Tabbed"></a>
<h2>Navigator Preferences - Tabbed Browsing</h2>
<p>This section describes how to use the Tabbed Browsing preferences panel.
If you're not already viewing it, follow these steps:
</p>
<p> 1. Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.<br>
2. Under the Navigator category, click Tabbed Browsing. (If no subcategories
are visible, double-click Navigator to expand the list.)</p>
<p><br></p>
<p>The Tabbed Browsing preferences panel allows you to set up Tabbed Browsing:</p>
<p><b>Note</b>: On Mac OS, where instructed to press Control (Ctrl), press Command
instead.</p>
<ul>
<li><b>Tab Display</b>: </li>
<ul>
<li><b>Hide the tab bar when only one tab is open</b>: Select this to display
the Tabbed Browsing bar only when more then one Navigator tab is open.</li>
<li><b>Select new tabs opened from links</b>: Select this to make Mozilla switch
to the new tab when using &quot;Open in a New Tab&quot; to open a link.</li>
</ul>
<li><b>Open tabs instead of windows for</b>: </li>
<ul>
<li><b>Middle-click or control-click of links in a Web page</b>: Select this
to open web page links in a new tab when clicking a link with the middle mouse
button or while pressing Ctrl.</li>
<li><b>Control+Enter in the Location bar</b>: Select this to open a web-page
link in a new tab when you type a URL in the Location Bar and press Ctrl+Enter.</li>
</ul>
<p>&nbsp;</p>
</ul>
<hr>
<a name="downloadSDX"></a>
<a name="downloadingSDX"></a>
<a name="Download_Manager:preferencesIDX"></a>
<a name="preferences:DownloadsIDX"></a>
<a name="downloads"></a>
<h2>Navigator Preferences - Downloads</h2>
<p>This section describes how to use the Downloads preferences panel. If you're
not already viewing it, follow these steps: </p>
<p> 1. Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.<br>
2. Under the Navigator category, click Downloads. (If no subcategories are visible,
double-click Navigator to expand the list.)</p>
<p><br></p>
<p>The Downloads preferences panel allows you to set up how Mozilla handles
files you download from web pages:</p>
<ul>
<li><b>When starting a download</b>: </li>
<ul>
<li><b>Open the download manager</b>: Select this to display the Download Manager,
which displays the status for current and previous downloads. The status of all
downloads is kept in a single window.</li>
<li><b>Open a progress dialog</b>: Select this to display a progress dialog box,
which display the status for your current download. The status of each download
is kept in a separate window.</li>
<li><b>Don't open anything</b>: Select this if you want to download files invisibly.
No status is given for all your downloads.</li>
</ul>
</ul>
<p>For more information about downloading files from web pages, see <a href="nav_help.html#nav_helperapps">Managing
Different File Types</a>.</p>
<p>&nbsp;</p>
<hr>
<p> <i> 7 October 2002</i> </p>
<hr>
<p>Copyright &copy; 1998-2003 The Mozilla Foundation.</p>
</body>
</html>

View File

@ -1,135 +0,0 @@
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Using the Help Window</title>
<link rel="stylesheet" href="chrome://help/locale/content_style.css" type="text/css">
</head>
<body>
<a NAME="help_help"></a>
<hr><h1>Using the Help Window </h1>
<p>This section describes how to use the Help window&mdash;that is, the entire window in which this text and the tabs to the left are displayed.
<p>For additional sources of support and information, click the links displayed in the bottom portion of the <a href="welcome_help.xhtml">Help and Support Center</a>. </p>
<table summary="list of headings" cellpadding=4 cellspacing=2 bgcolor="#cccccc" Width=324>
<tr>
<td class="inthissections">
<p>In this section:</p>
<p><a href="#tabs">Finding the Topic You Want</a></p>
<p><a href="#retrace">Retracing Your Steps</a></p>
<p><a href="#shortcuts">Using Help Shortcuts</a></p>
<p><a href="#buttons">Using Help Buttons</a></p>
</td>
</tr>
</table>
<p>&nbsp;</p>
<a NAME="tabs"></a>
<a NAME="navigationIDX"></a>
<a NAME="searching_helpSDX"></a>
<a NAME="search:help_topicsSDX"></a>
<h2>Finding the Topic You Want</h2>
<p>When you're viewing the Help window, click the tabs in the left frame to view the Help contents in different ways:
<ul>
<li><b>Contents</b> shows the list of main topics.
<p>Click a topic to read about it. Double-click to see its subtopics.
<p>If you can't find the topic you want, click the Search or Index tab.
<li><b>Search</b> lets you search the built-in Mozilla Help.
<p>Type a word or phrase and press Enter to see related topics. Then click the topic you want to read about.
<p>If your Search doesn't return any topics, try typing fewer words or a different combination of words.
<li><b>Index</b> lists topics alphabetically.
<p>Click an index entry to view information on that topic.
<li><b>Glossary</b> lists definitions alphabetically.
<p>Click a glossary term to see its definition.
</ul>
<p>To see information related to the Help topic you're reading about, click links in the Help window just as you would in a regular web page.
<p>For example, this link brings you to a glossary definition: <a href="glossary.xhtml#cookie">cookie</a>. (Click the Back button to return to this page.)
<p>&nbsp;
<a NAME="retrace"></a>
<a NAME="printing_helpIDX"></a>
<h2>Retracing Your Steps</h2>
<p>To retrace your steps in Help, click the buttons near the top-left corner of the Help window:
<p><table summary="Help and Support Center" width = "300">
<tr>
<td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<img alt="Help navigation icons" src="images/help_nav.gif">
</td><td><b>Help and Support Center</b></td></tr>
<tr><td><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Back&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Forward</b>
</td>
</tr>
</table>
<ul>
<li>Click the Back button to move back through pages you have previously visited. It works just like the Back button in the browser.
<li>Click the Forward button to move forward through pages you have previously visited. It works just like the Forward button in the browser.
<li>Click the Home button to see the Help and Support Center, including links to support options and web-based resources.
</ul>
<p>If you're having trouble keeping the Help window visible while you're following instructions, click Mozilla Help in the Windows toolbar to bring it to the front again.
<p>Alternatively, print the instructions you want to follow:</li>
<ul><li>To print the whole page that's currently displayed in the Help window, click the Print button near the top-right corner of the Help window:
<p><img alt="Help print icon" src="images/help_print.gif">
<br><b>&nbsp;&nbsp;Print</b>
<li>To print just a portion of the page, first click and drag to select the area you want to print, then click the Print button.</ul>
<p>&nbsp;</p>
<a NAME="shortcuts"></a>
<a NAME="shortcuts:help_systemIDX"></a>
<h2>Using Help Shortcuts</h2>
<p>You can use keyboard shortcuts to navigate within the Help window. For details, see <a href="shortcuts.xhtml#help_window_shortcuts">Help Window Shortcuts</a>.
<p>&nbsp;</p>
<a NAME="buttons"></a>
<h2>Using Help Buttons</h2>
<p>Many specialized Mozilla windows and dialog boxes include a button labeled "Help".
<p>Click any Help button to see detailed information about the window in which it appears.
<p>&nbsp;</p>
<a NAME="search_tips"></a>
<h2>Search Tips</h2>
<p>Not finding what you want in the Search? Here are a few tips that could help:</p>
<ul>
<li>Be sure that you are searching for something that relates to Mozilla; This is not a web search.</li>
<li>Try to broaden your search - don't be too specific; The terms could be worded differently than what you search for.</li>
<li>Avoid being too broad with your search: words like &quot;Mail&quot; and &quot;mozilla&quot; could possibly return all of the pages in the help file.</li>
</ul>
</div>
<p>
[&nbsp;<A HREF="#help_help">Return to beginning of section</A>&nbsp;]
</p>
</body>
</html>

File diff suppressed because it is too large Load Diff

View File

@ -1,541 +0,0 @@
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Using Certificates</title>
<link rel="stylesheet" href="chrome://help/locale/content_style.css" type="text/css">
</head>
<body>
<hr>
<a NAME="certificates:usingIDX"></a>
<a NAME="using_certs_first"></a>
<a NAME="certificates:aboutIDX"></a>
<a NAME="identificationSDX"></a>
<a NAME="ID_cardSDX"></a>
<a NAME="identitySDX"></a>
<a NAME="digital_IDSDX"></a>
<h1>Using Certificates</h1>
<p>A certificate is the digital equivalent of an ID card. Just as you may have several ID cards for different purposes, such as a driver's license, an employee ID card, or a credit card, you can have several different certificates that identify you for different purposes.</p>
<P>This section describes how to perform operations related to certificates.</p>
<table summary="list of headings" cellpadding=4 cellspacing=2 bgcolor="#cccccc" Width=324>
<tr>
<td class="inthissection">
<p>In this section:</p>
<p><a href="#using_certs_get">Getting Your Own Certificate</a></p>
<p><a href="#using_certs_info">Checking Security for a Web Page</a></p>
<p><a href="#using_certs_manage">Managing Certificates</a></p>
<p><a href="#using_certs_devices">Managing Smart Cards and Other Security Devices</a></p>
<p><a href="#using_certs_ssl">Managing SSL Warnings and Settings</a></p>
<p><a href="#using_certs_validation">Controlling Validation</a></p>
</td>
</tr>
</table>
<p>&nbsp;</p>
<hr>
<a NAME="certificates:gettingIDX"></a>
<a NAME="using_certs_get"></a>
<h1>Getting Your Own Certificate</h1>
<P>Much like a credit card or a driver's license, a certificate is a form of identification you can use to identify yourself over the Internet and other networks. Like other commonly used personal IDs, a certificate is typically issued by an organization with recognized authority to issue such identification. An organization that issues certificates is called a <b>certificate authority (CA).</b>
<p>You can obtain certificates that identify you from public CAs, from system administrators or special CAs within your organization, or from websites offering specialized services that require a means of identification more reliable that your name and password.
<p>Just as the requirements for a driver's license vary depending on the type of vehicle you want to drive, the requirements for obtaining a certificate vary depending on what you want to use it for. In some cases getting a certificate may be as easy as going to a website, entering some personal information, and automatically downloading the certificate into your browser. In other cases you may have to go through more complicated procedures.
<p>You can obtain a certificate today by visiting the URL for a certificate authority and following the on-screen instructions. For a list of certificate authorities, see the online document <a href="https://certs.netscape.com/" TARGET="_blank">Client Certificates</a>. </p>
<p>Once you obtain a certificate, it is automatically stored in a <a href="glossary.xhtml#security_device">security device</a>. Your browser comes with its own built-in Software Security Device. A security device can also be a piece of hardware, such as a smart card.</p>
<p>Like a driver's license or a credit card, a certificate is a valuable form of identification that can be abused if it falls into the wrong hands. Once you've obtained a certificate that identifies you, you should protect it in two ways: by backing it up and by setting your <a href="glossary.xhtml#master_password">master password</a>.
<p>When you first obtain a certificate, you may be prompted to back it up. If you haven't yet created a master password, you will be asked to create one.
<p>For detailed information about backing up a certificate and setting your master password, see <a href="certs_help.xhtml#your_certificates">Your Certificates</a>.
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<hr><a NAME="security:checking_for_a_web_pageIDX"></a>
<a NAME="using_certs_info"></a>
<a NAME="lock_iconSDX"></a>
<a NAME="lock_iconIDX"></a>
<a NAME="broken_lock_iconSDX"></a>
<a NAME="open_lock_iconSDX"></a>
<a NAME="encryption_status_of_web_pageSDX"></a>
<a NAME="encryption:status_of_web_pageIDX"></a>
<h1>Checking Security for a Web Page</h1>
<p>When you're viewing any web page, the lock icon near the lower-right corner of the window informs you whether the entire contents of the page was protected by <a href="glossary.xhtml#encryption">encryption</a> while it was being received by your computer:</p>
<table summary="lock icons"> <tr><td>&nbsp;</td><td><img alt="closed lock icon"src="chrome://communicator/skin/icons/lock-secure.gif">&nbsp;</td><td>A closed lock means that the page was protected by encryption when it was received.</td></tr>
<tr><td>&nbsp;</td><td>&nbsp;</td><td>&nbsp;</td></tr>
<tr><td>&nbsp;</td><td><img alt="open lock icon" src="chrome://communicator/skin/icons/lock-insecure.gif">&nbsp;</td><td>An open lock means the page was not protected by encryption when it was received. </td></tr>
<tr><td>&nbsp;</td><td>&nbsp;</td><td>&nbsp;</td></tr>
<tr><td>&nbsp;</td><td><img alt="broken lock icon"src="chrome://communicator/skin/icons/lock-broken.gif">&nbsp;</td><td>A broken lock means that some or all of the elements within the page were not protected by encryption when the page was received, even though the outermost HTML page was encrypted.</td></tr>
</table>
<p>For more details about the encryption status of the page when it was received, click the lock icon (or open the View menu, choose Page Info, and click the Security tab).
<p>The Security tab for Page Info provides two kinds of information:
<ul>
<li>The top half describes whether the website displaying the page has been verified. (For information on certificate verification, see <a href="#using_certs_validation">Controlling Validation</a>.)</li>
<li>The bottom half describes whether the contents of the page you are viewing is protected by encryption while in transit over the network.</li>
</ul>
<p><b>Important:</b> The lock icon describes only the encryption status of the page while it was being received by your computer. To be notified before you send or receive information without encryption, select the appropriate SSL warning options. See <a href="ssl_help.xhtml">Privacy &amp; Security Preferences - SSL</a> for details.
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<hr>
<a NAME="using_certs_manage"></a><a NAME="certificates:managingIDX"></a>
<h1>Managing Certificates</h1>
<p>You can use the Certificate Manager to manage the certificates you have available. Certificates may be stored on your computer's hard disk or on <a href="glossary.xhtml#smart_card">smart cards</a> or other security devices attached to your computer.</p>
<p>To open the Certificate Manager:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, click Certificates. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
<li>In the Manage Certificates section, click Manage Certificates. You see the Certificate Manager.
</ol>
<p><table summary="list of headings" cellpadding=4 cellspacing=2 bgcolor="#cccccc" Width=324>
<tr>
<td class="inthissection">
<p>In this section:</p>
<p><a HREF="#using_certs_my">Managing Certificates that Identify You</a></p>
<p><a HREF="#using_certs_others">Managing Certificates that Identify Others</a></p>
<p><a HREF="#using_certs_sites">Managing Certificates that Identify Websites</a></p>
<p><a HREF="#using_certs_cas">Managing Certificates that Identify Certificate Authorities</a></p>
</td>
</tr>
</table>
<p>&nbsp;</p>
<a NAME="using_certs_my"></a><a NAME="certificates:your_ownIDX"></a>
<H2>Managing Certificates that Identify You</H2>
<p>When you first open the Certificate Manager, you'll notice that it has several tabs across the top of its window. The first tab is called Your Certificates, and it displays the certificates your browser has available that identify you. Your certificates are listed under the names of the organizations that issued them.
<p>To perform an action on one or more certificates, click the entry for the certificate (or Control-click to select more than one), then click the View, Backup, or Delete button. Each of these buttons brings up another window that allows you to perform the action. Click the Help button in any window to obtain more information about using that window.
<p>The following buttons under Your Certificates don't require a certificate to be selected. You use them to perform these actions:
<ul>
<li><b>Import.</b> Click this button if you want to import a certificate that you've previously backed up or transferred from one machine to another.
<li><b>Backup All.</b> Click this button to back up all your own certificates stored in the <a href="glossary.xhtml#software_security_device">Software Security Device</a>.
</ul>
<p><b>Certificates on smart cards cannot be backed up.</b> Whether you select some of your certificates and click Backup, or click Backup All, the resulting backup file will not include any certificates stored on smart cards or other external security devices. You can only back up certificates that are stored on the built-in Software Security Device.
<p>For more details about any of these tasks, see <a href="certs_help.xhtml#your_certificates">Your Certificates</a>.
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<a NAME="using_certs_others"></a><a NAME="certificates:other peopleIDX"></a>
<H2>Managing Certificates that Identify Others</H2>
<p><p>When you compose a mail message, you can choose to attach your digital signature to it. A <a href="glossary.xhtml#digital_signature">digital signature</a> allows recipients of the message to verify that the message really comes from you and hasn't been tampered with since you sent it.
<p>Every time you send a digitally signed message, your encryption certificate is automatically included with the message. This certificate allows the message recipients to send you encrypted messages.
<p>One of the easiest ways to obtain someone else's encryption certificate is for that person to send you a digitally signed message. Certificate Manager automatically stores other people's certificates whenever they are received in this way.
<p>To view all the certificates identifying other people that are available to the Certificate Manager, click the Other People's tab at the top of the Certificate Manager window. You can send encrypted messages to anyone for whom a valid certificate is listed. Certificates are listed under the names of the organizations that issued them.
<p>To perform an action on one or more certificates, click the entry for the certificate (or Control-click to select more than one), then click the View or Delete button. Each of these buttons brings up another window that allows you to perform the action. Click the Help button in any window to obtain more information about using that window.
<p>For more details, see <a href="certs_help.xhtml#other_peoples_certificates">Other People&apos;s Certificates</a>.
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<a NAME="using_certs_sites"></a><a NAME="certificates:web_siteIDX"></a>
<H2>Managing Certificates that Identify Websites</H2>
<p>Some websites use certificates to identify themselves. Such identification is required before the website can encrypt information transferred between the site and your computer (or vice versa), so that no one can read the data while in transit.
<p>If the URL for a website begins with <tt>https://</tt>, the website has a certificate. If you visit such a website and its certificate was issued by a CA that the Certificate Manager doesn't know about or doesn't trust, you will be asked whether you want to accept the website's certificate. When you accept a new website certificate, the Certificate Manager adds it to its list of website certificates.
<p>To view all the website certificates available to your browser, click the Websites tab at the top of the Certificate Manager window.
<p>To perform an action on one or more website certificates, click the entry for the certificate (or Shift-click to select more than one), then click the View, Edit, or Delete button. Each of these buttons brings up another window that allows you to perform the corresponding action.
<p>The Edit button allows you to specify whether your browser will trust the selected website certificates in the future.
<p>For more details, see <a href="certs_help.xhtml#web_site_certificates">Website Certificates</a>.
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<a NAME="using_certs_cas"></a><a NAME="certificates:certificate_authorityIDX"></a>
<H2>Managing Certificates that Identify Certificate Authorities</H2>
<p>Like other commonly used forms of ID, a certificate is issued by an organization with recognized authority to issue such identification. An organization that issues certificates is called a <a href="glossary.xhtml#certificate_authority">certificate authority (CA)</a>. A certificate that identifies a CA is called a CA certificate.
<p> Certificate Manager typically has many CA certificates on file. These CA certificates permit Certificate Manager to recognize and work with certificates issued by the corresponding CAs. However, the presence of a CA certificate in this list does <i>not</i> guarantee that the certificates it issues can be trusted. You or your system administrator must make decisions about what kinds of certificates to trust depending on your security needs.
<p>To view all the CA certificates available to your browser, click the Authorities tab at the top of the Certificate Manager window.
<p>To perform an action on one or more CA certificates, click the entry for the certificate (or Control-click to select more than one), then click the View, Edit, or Delete button. Each of these buttons brings up another window that allows you to perform the action. Click the Help button in any window to obtain more information about using that window.
<p>The Edit button allows you to view and control the trust settings for each certificate. Trust settings for a CA certificate let you to specify which kinds of certificates issued by that CA you are willing to trust.
<p>For more details, see <a href="certs_help.xhtml#authorities">Authorities</a>.
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<hr>
<a NAME="using_certs_devices"></a>
<a NAME="smart_cards:managingIDX"></a>
<a NAME="Device_Manager:usingIDX"></a>
<a NAME="security_devices:managingIDX"></a>
<a NAME="security_modules:managingIDX"></a>
<a NAME="tokensSDX"></a>
<h1>Managing Smart Cards and Other Security Devices</h1>
<p>A smart card is a small device, typically about the size of a credit card, that contains a microprocessor and is capable of storing information about your identity (such as your <a href="glossary.xhtml#private_key">private keys</a> and <a href="glossary.xhtml#certificate">certificates</a>) and performing cryptographic operations.
<p>To use a smart card, you typically need to have a smart card reader (a piece of hardware) attached to your computer, as well as software on your computer that controls the reader.
<p>A smart card is just one kind of security device. A security device (sometimes called a token) is a hardware or software device that provides cryptographic services and stores information about your identity. Use the Device Manager to work with smart cards and other security devices.
</p>
<table summary="list of headings" cellpadding=4 cellspacing=2 bgcolor="#cccccc" Width=324>
<tr>
<td class="inthissection">
<p>In this section:</p>
<p><a href="#using_certs_devices_about">About Security Devices and Modules</a></p>
<p><a href="#using_certs_devices_devices">Using Security Devices</a></p>
<p><a href="#using_certs_devices_modules">Using Security Modules</a></p>
<p><a href="#using_certs_devices_fips">Enable FIPS Mode</a></p>
</td>
</tr>
</table>
<p>&nbsp;</p>
<a NAME="PKCS#11_and smart_cardsSDX"></a>
<a NAME="PKCS_#11_and smart_cardsSDX"></a>
<a NAME="PKCS_#11IDX"></a>
<a NAME="using_certs_devices_about"></a><a NAME="security_modules:aboutIDX"></a>
<a NAME="Device_Manager:aboutIDX"></a>
<a NAME="security_devices:aboutIDX"></a>
<h2>About Security Devices and Modules</h2>
<p>The Device Manager displays a window that lists the available security devices. You can use the Device Manager to manage any security devices, including smart cards, that support the Public Key Cryptography Standard (PKCS) #11.
<p>A <a href="glossary.xhtml#pkcs_11_module">PKCS #11 module</a> (sometimes called a security module) controls one or more security devices in much the same way that a software driver controls an external device such as a printer or modem. If you are installing a smart card, you must install the PKCS #11 module for the smart card on your computer as well as connecting the smart card reader.
<p>By default, the Device Manager controls two internal PKCS #11 modules that manage three security devices:
<ul>
<li><b>Mozilla Internal PKCS #11 Module:</b> Controls two security devices:</li>
<ul>
<li><b>Generic Crypto Services:</b> A special security device that performs all cryptographic operations required by the Mozilla Internal PKCS #11 Module.
<li><b>Software Security Device:L</b> Stores your certificates and keys that aren't stored on external security devices, including any CA certificates that you may have installed in addition to those that come with the browser.
</ul>
<li><b>Builtin Roots Module:</b> Controls a special security device called the Builtin Object Token. This security device stores the default <a href="glossary.xhtml#ca_certificate">CA certificates</a> that come with the browser.
</ul>
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<a NAME="using_certs_devices_devices"></a>
<h2>Using Security Devices</h2>
<p>The Device Manager allows you to perform operations on security devices. To open the Device Manager, follow these steps:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, click Certificates. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
<li>In the Certificates panel, click Manage Security Devices.
</ol>
<p>The Device Manager lists each available PKCS #11 module in boldface, and the security devices managed by each module below its name.
<p>When you select a security device, information about it appears in the middle of the Device Manager window, and some of the buttons on the right side of the window become available. For example, if you select the Software Security Device, you can perform these actions:
<ul>
<li>Click Login or Logout to log in or out of the Software Security Device. If you are logging in, you will be asked to supply the master password for the device. You must be logged into a security device before your browser software can use it to provide cryptographic services.
<li>Click Change Password to change the master password for the device.
</ul>
<p>You can perform these actions on most security devices. However, you cannot perform them on the Builtin Object Token or Generic Crypto Services, which are special devices that must normally be available at all times.
<p>For more details, see <a href="certs_help.xhtml#device_manager">Device Manager</a>.
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<a NAME="using_certs_devices_modules"></a>
<h2>Using Security Modules</h2>
<p>If you want to use a smart card or other external security device, you must first install the module software on your computer and, if necessary, connect any associated hardware. Follow the instructions that come with the hardware.
<p>After a new module is installed on your computer, follow these steps to load it:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, click Certificates. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
<li>In the Certificates panel, click Manage Security Devices.
<li>Click Load.
<li>In the Load PKCS #11 Module dialog box, click the Browse button, locate the module file, and click Open.
<li>Fill in the Module Name field with the name of the module and click OK.
</ol>
<p>The new module will then show up in the list of modules with the name you assigned to it.
<p>To unload a PKCS #11 module, select its name and click Unload.
<p>&nbsp;</p>
<a NAME="using_certs_devices_fips"></a><a NAME="FIPS_modeIDX"></a>
<h2>Enable FIPS Mode</h2>
<p>Federal Information Processing Standards Publications (FIPS PUBS) 140-1 is a US government standard for implementations of cryptographic modules&mdash;that is, hardware or software that encrypts and decrypts data or performs other cryptographic operations (such as creating or verifying digital signatures). Many products sold to the US government must comply with one or more of the FIPS standards.
<p>To enable FIPS mode for the browser, you use the Device Manager:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, click Certificates. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
<li>In the Certificates panel, click Manage Devices.
<li>Click the Enable FIPS button. When FIPS is enabled, the name NSS Internal PKCS #11 Module changes to NSS Internal FIPS PKCS #11 Module and the Enable FIPS button changes to Disable FIPS.
</ol>
<p>To disable FIPS-mode, click Disable FIPS.</P>
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<hr>
<a NAME="using_certs_ssl"></a>
<h1>Managing SSL Warnings and Settings</h1>
<p>The Secure Sockets Layer (SSL) protocol allows your computer to exchange information with other computers on the Internet in encrypted form&mdash;that is, the information is scrambled while in transit so that no one else can make sense of it. SSL is also used to identify computers on the Internet by means of <a href="glossary.xhtml#certificate">certificates</a>.
<p>The Transport Layer Security (TLS) protocol is a new standard based on SSL. By default, the browser supports both SSL and TLS. This approach works for most people, because it guarantees that the browser will work with virtually all other existing software on the Internet that supports any version of SSL or TLS.
<p>However, in some circumstances system administrators or other knowledgeable persons may wish to adjust the SSL settings to fine-tune them for special security needs or to account for bugs in some older software products.
<p>You shouldn't adjust the SSL settings for your browser unless you know what you're doing or have the assistance of someone else who does. If you do need to adjust them for some reason, follow these steps:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, select SSL. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
</ol>
<p>For more details, see <a href="ssl_help.xhtml">SSL Settings</a>.
</p>
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
<p>&nbsp;</p>
<hr>
<a NAME="using_certs_validation"></a>
<a NAME="certificates:validationIDX"></a>
<a NAME="validation,_of_certificates:aboutIDX"></a>
<h1>Controlling Validation</h1>
<p>As discussed above under <a href="#using_certs_get">Get Your Own Certificate</a>, a certificate is a form of identification, much like a driver's license, that you can use to identify yourself over the Internet and other networks. However, also like a driver's license, a certificate may expire or become invalid for some other reason. Therefore, your browser software needs to confirm the validity of any given certificate in some way before trusting it for identification purposes.
<p>This section describes how Certificate Manager validates certificates and how to control that process. To understand the process, you should have some familiarity with <a href="glossary.xhtml#public-key_cryptography">public-key cryptography</a>. If you are not familiar with the use of certificates, you should check with your system administrator before attempting to change any of your browser's certificate validation settings.<p>
<table summary="list of headings" cellpadding=4 cellspacing=2 bgcolor="#cccccc" Width=324>
<tr>
<td class="inthissection">
<p>In this section:</p>
<p><a href="#How_Certificate_Validation_Works">How Validation Works</a></p>
<p><a href="#Managing_CRLs">Managing CRLs</a></p>
<p><a href="#Configuring_Certificate_Manager_for_OCSP">Configuring OCSP</a></p>
<p><a href="validation_help.xhtml">Validation Settings</a></p>
</td>
</tr>
</table>
<p>
<p>&nbsp;</p>
<a name="How_Certificate_Validation_Works"></a>
<a NAME="OCSP:aboutIDX"></a>
<a NAME="CRLs:aboutIDX"></a>
<a NAME="validation:aboutIDX"></a>
<h2>How Validation Works</h2>
<p>Whenever you use or view a certificate stored by Certificate Manager, it takes several steps to verify the certificate. At a minimum, it confirms that the CA's digital signature on the certificate was created by a CA whose own certificate is (1) present in the Certificate Manager's list of available CA certificates and (2) marked as trusted for issuing the kind of certificate being verified.
<p>If the CA certificate is not itself present, the <a href="glossary.xhtml#certificate_chain">certificate chain</a> for the CA certificate must include a higher-level CA certificate that is present and correctly trusted. Certificate Manager also confirms that the certificate being verified is currently marked as trusted in the certificate store. If any one of these checks fails, Certificate Manager marks the certificate as unverified and won't recognize the identity it certifies.
<p>A certificate can pass all these tests and still be compromised in some way; for example, the certificate may be revoked because an unauthorized person has gained access to the certificate's private key. A compromised certificate can allow an unauthorized person (or website) to pretend to be the certificate owner.
<p>One way to combat this threat is for Certificate Manager to check a certificate revocation list (CRL) as part of the verification process (see <a href="#Managing_CRLs">Managing CRLs</a>, below). Typically, you download a CRL to your browser by clicking a link. If a CRL is present, Certificate Manager checks any certificate issued by the same CA against the list as part of the verification process.
<p>The reliability of CRLs depends on the frequency with which they are both updated by a server and checked by a client. You can configure your <a href="validation_help.xhtml#automatic_crl_update_preferences">Automatic CRL Update Preferences</a> so that a CRL will be updated automatically at regular intervals with the version currently on the server.
<p>Another way to combat the threat of compromised certificates is to use a special server that supports the Online Certificate Status Protocol (OCSP). Such a server can answer client queries about individual certificates (see <a href="#Configuring_Certificate_Manager_for_OCSP">Configuring OCSP</a>, below).
<p>The server, called an OCSP responder, receives an updated CRL periodically from the CA that issues the certificates to be verified. You can configure Certificate Manager to submit a status request for a certificate to the OCSP responder, and the OCSP responder confirms whether the certificate is valid.
<p>&nbsp;</p>
<a name="Managing_CRLs"></a><h2>Managing CRLs</h2>
<p>A certificate revocation list (CRL) is list of revoked certificates. A <a href="glossary.xhtml#certificate_authority">certificate authority (CA)</a> might revoke a certificate, for example, if it has been compromised in some way&mdash;much the way a credit card company might revoke your credit card if you report that it's been stolen.
</p>
<p>This section describes how to import and manage CRLs. <p>For background information, see <a href="#How_Certificate_Validation_Works">How Validation Works</a>.
<p>For detailed descriptions of CRL settings that you can control, see <a href="validation_help.xhtml">Validation Settings</a>.</p>
<table summary="list of headings" cellpadding=4 cellspacing=2 bgcolor="#cccccc" Width=324>
<tr>
<td class="inthissection">
<p>In this section:</p>
<p><a href="#next_update">About the "Next Update" Date</a></p>
<p><a href="#Importing_CRLs">Importing CRLs</a></p>
<p><a href="#view_manage_CRLs">Viewing and Managing CRLs</a></p>
</td>
</tr>
</table>
<p>&nbsp;</p>
<a NAME="CRLs:Next_Update_dateIDX"></a>
<a name ="next_update"></a><h3>About the "Next Update" Date</h3>
<p>The browser uses the CRLs it has available to check the validity of certificates issued by the corresponding CAs. If a certificate is listed as revoked, the browser won't accept it as evidence of identity.
<p>A CA typically publishes an updated CRL at regular intervals. Every CRL includes a date, specified in the Next Update field, by which the CA will publish the next update of that CRL. In general, if the date in the Next Update field is earlier than the current date, you should obtain the most recent version of the CRL. To view CRL information and set up automatic CRL updating, see <a href="#view_manage_CRLs">Viewing and Managing CRLs</a>.
<p>CAs are required to produce a new CRL by the Next Update date. However, the absence of the most recent CRL does not by itself invalidate a certificate. For this reason, if the most recent CRL is not available, a certificate may be validated even though the most recent CRL shows it as expired. Automatic CRL updating can help to avoid this situation.
<p>&nbsp;</p>
<a name="Importing_CRLs"></a><h3>Importing CRLs</h3>
<p> You can import the latest CRL from a CA into your browser. To import a CRL, follow these steps:
<ol>
<li>Go to the URL specified by the CA or by your system administrator and click the link for the CRL that you want to import.
<p>The Import Status dialog box appears.
<li>Confirm that the CRL was imported successfully and that it's the one you wanted. In most cases you should also click Yes, which enables automatic updating of the CRL you just imported.
<li>The next step depends on whether you click Yes or No in the Import Status dialog box:
<ul>
<p><b>Yes:</b> The Automatic CRL Update Preferences dialog box appears. In this case, go on to step 4.
<p><b>No:</b> The Import Status dialog box closes. If you change your mind and decide to enable automatic updates after all, see <a href="#view_manage_CRLs">Viewing and Managing CRLs</a>.</p>
</ul>
<li>Select the option labeled &quot;Enable Automatic Update for this CRL&quot;.
<li>Decide how you want to schedule the automatic updates:</li>
<ul>
<li><b>Update __ days before Next Update date:</b> Select this option if you want to base the update frequency on the frequency with which the CRL publisher publishes a new version of the CRL.
<li><b>Update every __ days:</b> Select this option if you want to specify an update interval unrelated to the CRL's Next Update date.
</ul>
<li>Click OK to confirm your choices.
</ol>
<p>&nbsp;</p>
<a name="view_manage_CRLs"></a><h3>Viewing and Managing CRLs</h3>
<p>You can view and manage CRLs available to the browser through the browser's Validation preferences:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, click Validation. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
<li>Click Manage CRLs in the Validation panel to see a list of the CRLs available to Certificate Manager.
</ol>
<p>To delete or update a CRL, select it and click the appropriate button.
<p>To set up automatic updates for a CRL, select the CRL and click Settings. The Automatic CRL Update Preferences dialog box appears:
<ol>
<li>Select the option labeled &quot;Enable Automatic Update for this CRL&quot;.</li>
<li>Decide how you want to schedule the automatic updates:</li>
<ul>
<li><b>Update __ days before Next Update date.</b> Select this option if you want to base the update frequency on the frequency with which the CRL publisher publishes a new version of the CRL.
<li><b>Update every __ days.</b> Select this option if you want to specify an update interval unrelated to the CRL's Next Update date.</li>
</ul>
<li>Click OK to confirm your choices.</li>
</ol>
<p>&nbsp;</p>
<a name="Configuring_Certificate_Manager_for_OCSP"></a><h2>Configuring OCSP</h2>
<p>The settings that control OCSP are part of Validation preferences. To view Validation preferences, follow these steps:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, click Validation. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
</ol>
<p>For information about the OCSP options available, see <a href="validation_help.xhtml#ocsp">OCSP</a>.
<p>
[&nbsp;<A HREF="#using_certs_first">Return to beginning of section</A>&nbsp;]
</p>
</body>
</html>

View File

@ -1,184 +0,0 @@
<html>
<head>
<title>Validation Settings</title>
<link rel="stylesheet" href="chrome://help/locale/content_style.css" type="text/css">
</head>
<body>
<a NAME="validation_settings"></a>
<a NAME="validation:settingsIDX"></a>
<a NAME="settings:validationIDX"></a>
<hr><h1>Validation Settings</h1>
<p>This section describes how to set Validation preferences and how to control Certificate Revocation List (CRL) settings.
<p>For step-by-step descriptions of various tasks related to validation and CRLs, see <a href="using_certs_help.html#using_certs_validation">How Certificate Validation Works</a>.
<p>&nbsp;</p>
<table cellpadding=4 cellspacing=2 bgcolor="#cccccc" Width=324>
<tr>
<td class="inthissection">
<p>In this section:</p>
<p><a href="#validation_first">Privacy &amp; Security Preferences - Validation</a></p>
<p><a href="#manage_CRLs_dialog">Manage CRLs</a></p>
<p><a href="#crl_import_status">CRL Import Status</a></p>
<p><a href="#auto_crl_update_prefs">Automatic CRL Update Preferences</a></p>
</td>
</tr>
</table>
<p>&nbsp;</p>
<hr>
<a NAME="validation_first"></a>
<a NAME="validation:OCSPIDX"></a>
<a NAME="validation:CRLsIDX"></a>
<a NAME="OCSP:preferencesIDX"></a>
<a NAME="CRLs:preferencesIDX"></a>
<a NAME="preferences:validationIDX"></a>
<h2>Privacy &amp; Security Preferences - Validation</h2>
<p>This section describes how to use the Validation Settings panel. If you are not already viewing the panel, follow these steps:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, click Validation. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
</ol>
<p>For background information on certificate validation, see <a href="using_certs_help.html#using_certs_validation">How Certificate Validation Works</a>.
<p>&nbsp;
<a NAME="CRL"></a>
<h3>CRL</h3>
<p>A certificate revocation list (CRL) is a list of revoked certificates that is generated and signed by a <a href="glossary.xhtml#certificate_authority">certificate authority (CA)</a>. It's possible to download a CRL to your browser, which can check it to ensure that certificates are still valid before permitting their use for authentication. <P>
<p>Click Manage CRLs to see a list of the CRLs available to Certificate Manager.
<p>For more information about managing CRLs, see <a href="using_certs_help.html#Managing_CRLs">Managing CRLs</a>.
<p>&nbsp;
<a NAME="OCSP"></a>
<h3>OCSP</h3>
<p>The Online Certificate Status Protocol (OCSP) makes it possible for Certificate Manager to perform an online check of a certificate's validity each time the certificate is viewed or used. This process involves checking the certificate against a certificate revocation list (CRL) maintained at a specified website. Your computer must be online for OCSP to work.</P>
<p>To specify how Certificate Manager uses OCSP, choose one of these settings in the OCSP section of Validation Settings:</P>
<ul>
<LI><B>Do not use OCSP for certificate verification.</B> Select this setting if you don't want Certificate Manager to perform an online status check each time it verifies a certificate. Instead, whenever Certificate Manager performs <a href="glossary.xhtml#certificate_verification">certificate verification</a>, it only confirms the certificate's validity period and that it is correctly signed by a CA whose own CA certificate is both listed under the CA Certificates tab (in the main Certificate Manager window) and marked as trusted for issuing that kind of certificate.</LI>
<LI><B>Use OCSP to verify only certificates that specify an OCSP service URL.</B> Select this setting if you want Certificate Manager perform an online status check each time it verifies a certificate that specifies a URL for the purpose of performing such a check. If a URL is specified by the certificate, Certificate Manager makes sure that the certificate is listed there as valid and checks the validity period and trust settings.</LI>
<LI><B>Use OCSP to verify all certificates, using the URL and signer specified here.</B> Select this setting if you want Certificate Manager to perform an online status check each time it verifies any certificate. If you select this setting, you should also choose the certificate from the Response Signer pop-up menu that identifies the signer of the OCSP responses. With this setting, the only certificates Certificate Manager recognizes are those that can be verified by an OCSP response signed with the Response Signer certificate (or signed using a certificate that chains to it).
<p>When you choose a Response Signer certificate from the pop-up menu, Certificate Manager fills in the Service URL (if available) for that signer automatically. If the Service URL is not filled in automatically, you must provide it yourself; ask your system administrator for details.</LI>
</ul>
<hr>
<a NAME="manage_CRLs_dialog"></a>
<a NAME="validation:managing_CRLsIDX"></a>
<a NAME="CRLs:managingIDX"></a>
<h2>Manage CRLs</h2>
<p>This section describes how to use the Manage CRLs dialog box. To view it, follow these steps:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, click Validation. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
<li>Click Manage CRLs.
</ol>
<p>This dialog box displays a list of the <a href="glossary.xhtml#certificate_revocation_list">CRLs</a> that you have downloaded for use by your browser. Typically, you download a CRL by clicking a URL. FOr information about how CRLs work, see <a href="using_certs_help.html#Managing_CRLs">Managing CRLs</a>.
<p>To select a CRL, click it. You can then perform any of these actions:
<ul>
<li><b>Delete:</b> Deletes the CRL permanently from your hard disk. Don't do this unless you're sure you no longer need the CRL for validating certificates. If in doubt, consult your system administrator.
<li><b>Settings:</b> Opens the <a href="#auto_crl_update_prefs">Automatic CRL Update Preferences</a> dialog box, which allows you to activate automatic CRL updates for the selected CRL and specify how frequently they should be performed.
<li><b>Update:</b> Immediately updates the selected CRL (if possible).
</ul>
<p>The Manage CRLs dialog box provides the following information about each CRL:
<ul>
<li><b>Organization (O):</b> The name of the organization that issued the CRL.
<li><b>Organizational Unit (OU):</b> The name of the organizational unit that issued the CRL (such as the root CA for a particular kind of certificate).
<li><b>Last Update:</b> The date on which the browser's copy of this CRL was last updated.
<li><b>Next Update:</b> The next date on which an updated version of this CRL will be published by the CRL issuer.
<li><b>Auto Update:</b> Indicates whether Auto Update has been enabled for this CRL. To view the settings that control auto updating, select the CRL and click Settings.
<li><b>Auto Update Status:</b>
<ul>
<li>If Auto Update has not been enabled, or if it has been enabled but the next scheduled update has not yet occurrred, this field will be blank.
<li>After at least one auto update has occurred, this field shows &quot;failed&quot; if the most recent auto update failed, or &quot;OK&quot; if the most recent auto update was successful.
</ul></ul>
<hr>
<a NAME="crl_import_status"></a>
<a NAME="validation:managing_CRLsIDX"></a>
<a NAME="CRLs:import_status_of"></a>
<h2>CRL Import Status</h2>
<p>This section describes how to use the CRL Import Status dialog box, which appears when you first attempt to import a CRL or when you successfully update it manually.
<p>This dialog box informs you
<ul>
<li>whether your attempt to import or update the CRL was successful
<li>what organization issued the CRL
<li>when the next update of this CRL will be published
<li>whether Automatic Update is enabled for this CRL
</ul>
<p>If Automatic Update is not enabled, you can turn it on from here:
<ul>
<li><b>Yes:</b> Click Yes to enable automatic updating of this CRL. If you click this button, the Automatic CRL Update Preferences dialog box appears next. The next section describes how to set these preferences.
<li><b>No:</b> Click No if you wish to leave Automatic Update disabled.
</ul>
<hr>
<a NAME="auto_crl_update_prefs"></a>
<a NAME="validation:auto_updating_CRLsIDX"></a>
<a NAME="CRLs:auto_upates_forIDX"></a>
<h2>Automatic CRL Update Preferences</h2>
<p>This section describes how to use the Automatic CRL Update Preferences dialog box. If you are not already viewing it, follow these steps:
<ol>
<li>Open the Edit menu (Mozilla menu on Mac OS X) and choose Preferences.
<li>Under the Privacy &amp; Security category, click Validation. (If no subcategories are visible, double-click Privacy &amp; Security to expand the list.)
<li>Click Manage CRLs, then select the CRL whose auto update preferences you want to view or change.
<li>Click Settings.
</ol>
<p>This dialog box displays the following options and information:
<ul>
<li><b>Enable Automatic Update for this CRL:</b> Select this option if you want the CRL you selected to be updated automatically according to the schedule you set here. (Note that you can't select this option if the CRL doesn't specify a Next Update date.)
<p>If you enable Automatic Update, you must select one of these radio buttons:
<ul>
<li><b>Update X days before Next Update date.</b> Select this option if you want to base the update frequency on the frequency with which the CRL publisher publishes a new version of the CRL.
<li><b>Update every X days.</b> Select this option if you want to specify an update interval unrelated to the CRL's Next Update date.
</ul>
<li><b>CRL would be imported from:</b> Indicates the URL from which the browser originally imported the CRL. This setting cannot be changed. To specify a different location, delete the CRL and re-import it from the new location.
<li><b>Previous Consecutive Update Failures:</b> Indicates how many times update attempts for this CRL have failed consecutively, including the most recent failure:
<ul>
<li> If the most recent attempt was successful, this reads "None" even if there were previous unsuccessful attempts.
<li>If the most recent attempt failed, this indicates the number of consecutive failures and the error message for the most recent failure.
</ul></ul>
<p>Click OK to confirm your choices.
</body>
</html>