Sorry I keep having so many issues with EC :)
Using vfyserv from nss-3.12.6 built using mozilla-build on Vista32.
C:\usr\mozilla>vfyserv.exe -d . -p 9444 ferret.pki
Connecting to host ferret.pki (addr 192.168.1.171) on port 9444
Error in function PR_Write: -12286
- Cannot communicate securely with peer: no common encryption
algorithm(s).
C:\usr\mozilla>vfyserv.exe -d . -p 9444 -C :c005 ferret.pki
Connecting to host ferret.pki (addr 192.168.1.171) on port 9444
Error in function PR_Write: -12268
- Cannot connect: SSL is disabled.
Ok, the first one makes sense. On a previous posting a little over a
year ago Nelson told me NSS won't enable, by default, ciphers added
since 3.0. What's up with the second one?
I *can* reach the server in question with my downloaded from mozilla.org
copy of Firefox 3.6.whatever-is-current.
Looking around it seems "SSL is disabled" has to do with ssl cert issues
and in the context of firefox some sites say to add exceptions. I have
already added the certificate of the CA that issued the SSL cert for
this server to the DB and it's marked "CT,C,C".
Thanks,
Dave
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto