Re: Extended Validation Certificates

2006-11-06 Thread Duane
Duane wrote: Sorry, email app auto completed the wrong address... -- Best regards, Duane http://www.cacert.org - Free Security Certificates http://www.nodedb.com - Think globally, network locally http://www.sydneywireless.com - Telecommunications Freedom http://e164.org - Because e164.arpa is

Re: Extended Validation Certificates

2006-11-06 Thread Duane
Robert Sayre wrote: > I believe it presents a higher barrier. Since there is no technical > advantage to EV, I am not sure that will matter, once ways of > manipulating the EV system are discovered by criminals (does anyone > think they won't figure something out?). I don't think Mozilla should >

Re: SEC_ASN1Template and OPTIONAL/ANY

2006-11-06 Thread Nelson B
Wei Shao wrote: > can someone explain how the ASN1 template works in general, http://www.google.com/search?hl=en&q=asn.1+template+site%3Amozilla.org will show you the available documentation on NSS's ASN.1 templates. See especially http://www.mozilla.org/projects/security/pki/nss/tech-notes/tn1

Prepare SECItem for DER_Encode()

2006-11-06 Thread Wei Shao
Hi, if I need to populate a OCTET_STRING for DER encoding, how shall I prepare the SECItem structure? I need to call this method, SECStatus DER_Encode(PRArenaPool *arena, SECItem *dest, DERTemplate *dtemplate, void *src) where src is a pointer to SECItem structure. How shall I prepare the dat

possible bug in NSS and pkcs11 with multiple certs

2006-11-06 Thread Christian Bongiorno
I am currently writing a PKCS11 module for a new card that is required by policy to have 3 certs for 3 different uses (I have no idea why). There is 1 for client authentication, 1 for signing emails, and 1 for encryption. When I go to use firefox for client authentication the 1 certificate that

Re: getting blank page with client cert

2006-11-06 Thread Christian Bongiorno
Arshad, I found out that it was a client authentication issue. The client wasn't correctly decrypting the challenge. Which brings me to another question I will be asking this groups shortly. Christian http://christian.bongiorno.org/ ___ dev-tech-cry

Re: patches

2006-11-06 Thread David Stutzman
Thanks to everyone that replied to this thread. I think it's good to have this information out there for us less-experienced. Nelson Bolyard wrote: To apply it, you'll need to pull NSS from the trunk, then use the patch command to apply the patch. Please advise if that is a problem. The pat