Re: GeoTrust request for EV root inclusion

2008-03-06 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > I've also read already your reply at the bug and to this list, so I'm > not going to argue about your examination and decision. My job is/was to > make you aware of eventual irregularities. And I appreciate your doing so. As it turned out this was a non-trivial

Re: GeoTrust request for EV root inclusion

2008-03-06 Thread Eddy Nigg (StartCom Ltd.)
Frank Hecker: > I don't think it's an issue with the EV criteria. The final EV > guidelines were issued in June 2007, in plenty of time for them to be > reflected in the July 27, 2007 CPS. So as far as I can tell the KPMG audit of > GeoTrust was an audit against the final WebTrust EV criteria us

Re: GeoTrust request for EV root inclusion

2008-03-06 Thread Frank Hecker
Frank Hecker wrote: > The new CPS didn't exist at the time of the audit, but it did exist at > the time of the audit report. Actually, the new CPS was in fact written and approved during the audit period; see https://bugzilla.mozilla.org/show_bug.cgi?id=407168#c26 > The bottom line: I think th

Re: Questions about NSS PKCS#11 module configuration

2008-03-06 Thread Robert Relyea
Subrata Mazumdar wrote: Hi Robert, thanks a lot for your response. I will definitely use it and see if I can uncover/fix the memory leak. That would be great! BTW, what is name of the DLL for CAPI PKCS#11 module that I should use to configure the device manager? Is it nsscapi.dll? yes, I

Re: GeoTrust request for EV root inclusion

2008-03-06 Thread Frank Hecker
Frank Hecker wrote: > Here's my interpretation of what happened: KPMG audited against the True > businessID CPS of July 27, 2007 s/July 27, 2007/July 1, 2007/g The version number of the document is 2.7, which is probably why I made this particular error. Frank -- Frank Hecker [EMAIL PROTECTE

Re: GeoTrust request for EV root inclusion

2008-03-06 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > Now this is exactly the issue I'm seeing here. Shouldn't have KPMG > confirmed the actual CPS against which the audit was performed? KPMG > confirms to have audited against a CPS which didn't existed at the time > of the audit and which wasn't valid in every re

Socket configuration settings for single process client server

2008-03-06 Thread D3|\||\|!$
Hi All!!! I wrote a single process SSL client-server based upon the selfserv- tstclnt pair(but minus the threading..) Initially the entire thing was in C and worked properly; then I decided to make a C++ wrapper out of it to establish SSL connections... I used the same initialization configurati

Re: GeoTrust request for EV root inclusion

2008-03-06 Thread Eddy Nigg (StartCom Ltd.)
Jay Schiavo replies at the bug https://bugzilla.mozilla.org/show_bug.cgi?id=407168#c24 with the following: We did consolidate all our CPSs into one document. However, The EV sections included in the CPS were copied over from the True business ID with EV CPS. There were no changes to t

Re: SSL_ConfigServerSessionIDCache re-initializing nickname string.

2008-03-06 Thread D3|\||\|!$
I tried running my "C++" server in debug mode against my "C" client. Now my send function is throwing error -5978(PR_NOT_CONNECTED_ERROR - "Network file descriptor is not connected"). I'm able to recieve packets on the same socket from the client but cannot send it the other way... What could be t

Re: SPNEGO and MDNS

2008-03-06 Thread Nelson Bolyard
Michael Ströder wrote, On 2008-03-05 15:23: > Michael Ströder wrote: >> If I configure the KDC in /etc/krb5.conf in section [realms] everything >> works fine. But I'd like to let the clients lookup the KDC in DNS SRV >> records. This works fine for the MIT utils like kinit etc. but not for >> Fi