Re: GlobalSign requests (replacement root, EV)

2008-07-14 Thread Gen Kanai
On Jul 15, 2008, at 4:13 AM, Nelson B Bolyard wrote: > > Eddy Nigg wrote, On 2008-07-13 22:09: >> Nelson B Bolyard: >>> Eddy Nigg wrote, On 2008-07-13 13:53: >>> This is perhaps the first EV request which doesn't have an operating OCSP responder at this stage. The EV guidelines r

Re: enabling crypto hardware for NSS

2008-07-14 Thread Nelson B Bolyard
David Sadler wrote, On 2008-07-14 07:08: > > I am trying to find a reference on how to configure NSS to support a > crypto hardware device. > > For openSSL I added "SSLCryptoDevice ibmca" to the httpd.conf file. This > enabled the ibmca engine in SSL. > > What is the counter way to enable a cry

Re: GlobalSign requests (replacement root, EV)

2008-07-14 Thread Nelson B Bolyard
Eddy Nigg wrote, On 2008-07-13 22:09: > Nelson B Bolyard: >> Eddy Nigg wrote, On 2008-07-13 13:53: >> >>> This is perhaps the first EV request which doesn't have an operating >>> OCSP responder at this stage. The EV guidelines requires it only in 2010 >>> however I haven't come across a CA which d

enabling crypto hardware for NSS

2008-07-14 Thread David Sadler
I am trying to find a reference on how to configure NSS to support a crypto hardware device. For openSSL I added "SSLCryptoDevice ibmca" to the httpd.conf file. This enabled the ibmca engine in SSL. What is the counter way to enable a crypto hardware device in NSS. I have an openCryptoki imple

Re: GlobalSign requests (replacement root, EV)

2008-07-14 Thread Frank Hecker
Eddy Nigg wrote: > This is perhaps the first EV request which doesn't have an operating > OCSP responder at this stage. The EV guidelines requires it only in 2010 > however I haven't come across a CA which doesn't provide this service > *and* issues EV. As Nelson notes, I don't think GlobalSign