Re: GlobalSign requests (replacement root, EV)

2008-07-13 Thread Eddy Nigg
Nelson B Bolyard: > Eddy Nigg wrote, On 2008-07-13 13:53: > >> This is perhaps the first EV request which doesn't have an operating >> OCSP responder at this stage. The EV guidelines requires it only in 2010 >> however I haven't come across a CA which doesn't provide this service >> *and* issues EV

Re: GlobalSign requests (replacement root, EV)

2008-07-13 Thread Nelson B Bolyard
Eddy Nigg wrote, On 2008-07-13 13:53: > This is perhaps the first EV request which doesn't have an operating > OCSP responder at this stage. The EV guidelines requires it only in 2010 > however I haven't come across a CA which doesn't provide this service > *and* issues EV. Actually, there ar

Re: GlobalSign requests (replacement root, EV)

2008-07-13 Thread Eddy Nigg
Frank Hecker: > Frank Hecker wrote: >> GlobalSign has submitted requests to include a replacement root >> certificate for an already-included root certificate (same public key, >> new expiry date) and to enable it and a second GlobalSign root for EV: >> >> https://bugzilla.mozilla.org/show_bug.cgi?

Re: Where are the binaries for nss 3.12 and nspr 4.7.1?

2008-07-13 Thread cafl
On Jun 24, 11:03 am, Glen Beasley <[EMAIL PROTECTED]> wrote: > hi, > > cannot you not just build the binaries yourself? > > http://www.mozilla.org/projects/security/pki/nss/nss-3.12/nss-3.12-re...http://www.mozilla.org/projects/security/pki/nss/nss-3.11.4/nss-3.11 I found this reply in the de

Re: The TLS Report

2008-07-13 Thread Eddy Nigg
Frank Hecker: > Note in that regard that the StartCom interface is actually not as > flexible as I'd like. It forced me to specify www.hecker.org as the CN > and hecker.org as a SAN, when I would have preferred it the other way > around, since hecker.org is now the canonical site name. > There are

Re: The TLS Report

2008-07-13 Thread Frank Hecker
Eddy Nigg wrote: > Also interesting choice of the CA, even though I realized > that you happen to change your server cert quite frequently ;-) Well, the price was a factor :-) However what I found even more important was support for SubjAltName and the ability to get a certificate for both heck