Re: How to build the NSS cmds on Mac OS X?

Nelson B wrote: Have a look at http://www.mozilla.org/build/distribution.html There you will find some text about configuring with --enable-crypto I think that does the trick. We stuck up a howto on our wiki... http://wiki.cacert.org/wiki/NSSLib -- Best regards, Duane http://www.cacert.or

JSS SSLInputStream & SSLOutputStream

Hello, Is there an example on how to use the JSS SSLInputStream and SSLOutputStream classes? Is it possible to connect to a SSL server via an URL using JSS Socket and NSS DB certificates? I need to connect to a SSL server, send a request and then receive a response. When I use Java SUN classes fo

Re: How to build the NSS cmds on Mac OS X?

ben wrote: > Can someone tell me how I can build NSS lib and its utility cmds on Mac > OS X? > I have downloaded the Mozilla source code and successfully built it on OS X, > but checked with the output obj dir, I didn't find the Security/nss was > created and built. How I can include the NSS in

Re: pkcs11 provider password issues

Hi Robert, robert dugal wrote: > SSL_AuthCertificate() is called to verify a certificate chain during an > SSL/TLS handshake. It ends up calling pk11_RetrieveCrls() which then > calls PK11_GetAllTokens() which loads ever P11 token, including those > that need a login. I am not certain how I c

re: pkcs11 default provider

robert dugal wrote: > I want to configure Firefox 1.5 to use my own PKCS11 provider as the > default for all algorithms supported by my provider. I cannot appear to > do this from the "Device Manager" dialog as that dialog has no way to > set specify which algorithms should default to my librar

Re: SSL compression

openssl has compression support for the DEFLATE algorithm (see RFC3749), implemented using the opensource zlib. The company I work for, Certicom, has an SSL/TLS/DTLS toolkit which supports DEFLATE, HiFn's patented LZS (see RFC3943), and LZO by Markus F.X.J. Oberhumer using his minilzo. We have

SSL compression

If you're interested in compression information relating to SSL/TLS, I'd also suggest asking on the openssl-dev list. As of openssl 0.9.8, zlib compression is used by default if the library is built with it; however, it has also caused some issues with SSL compatibility (leading to "invalid HMAC"