Re: How to add custom badCertHandler

2006-04-09 Thread Nelson B
Kate X wrote: > Hi, Now I am kind of stuck at this: > We are building application using xpcom components. I am trying to add SSL > support for our client, and I am using nsIHttpChannel interface to request a > HTTP/HTTPS page. For HTTP works fine, when trying to open HTTPS page, first > it will

Re: certificate requirements for crypto.signText

2006-04-09 Thread Nelson B
Mikolaj Habryn wrote: > Should I take it upon myself to raise this in bugzilla? Yes. File a bug in bugzilla.mozilla.org. It may get resolved differently than you hope, but that is the right way to push this to resolution. > I'm not entirely > clear on what the right solution is or even what c

Re: certificate requirements for crypto.signText

2006-04-09 Thread Mikolaj Habryn
On Sat, 2006-04-08 at 11:20 +0200, Jean-Marc Desperrier wrote: > Your use case is quite unorthodox, and is at risk of being criticized as > such. [...] > So, it seems quite contradictory to hope to get non-repudiation if you > don't care who the user is. This may well be the case; my model is i

How to add custom badCertHandler

2006-04-09 Thread Kate X
Hi, Now I am kind of stuck at this: We are building application using xpcom components. I am trying to add SSL support for our client, and I am using nsIHttpChannel interface to request a HTTP/HTTPS page. For HTTP works fine, when trying to open HTTPS page, first it will initializeNSS, then try

Re: Adding Ciphers

2006-04-09 Thread Jay Potter
Nelson, Ideally I would like to have my USB device generate an AES-256 session key directly and make it available for TLS use. There would be devices on both the client and the server to provide the hardware security. This would greatly spead up the authentication process along with increasi