Re: Error code: sec_error_untrusted_issuer

On Jul 16, 2:52 am, Eddy Nigg <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED]: > > > hi all. a have a problem with certificate. and don't know how to > > repair it. > > my email server is mail.george.ee , but certificate hav another name, > > name of my hosting. netpoint ... > > and thunderbird vers

Re: DESede/CBC/NoPadding throws TokenRuntimeException during Cipher.update() for arbitarly sized input

hi, you're welcome to create a bug, and JSS is open source so you're also more than welcome to provide the suggest code change for review. Also, if you do find the actual documentation that states "required by the JCE specification" please include the link in the bug report. thanks, glen Dea

Deutsche Telekom/T-Systems CA request

As I previously mentioned, I am now opening the first public discussion period for a request from T-Systems (a subsidiary of Deutsche Telekom) to add the Deutsche Telekom Root CA 2 root certificate to Mozilla. This is bug 378882, and Kathleen has produced an information document attached to the

Re: 3rd party ECC module + NSS integration

David Stutzman wrote, On 2008-07-16 07:14: > I'm using NSS 3.11.4 according to the Dogtag instructions. OK. I don't work on, or with, dogtag, so I don't know what version(s) of NSS it uses or recommends. Dogtag is just another one of the many products that use NSS that are relatively unknown t

DESede/CBC/NoPadding throws TokenRuntimeException during Cipher.update() for arbitarly sized input

It appears that when I call Cipher.update() with arbitrarly sized input for a DESede/CBC/NoPadding Cipher I get a TokenRuntimeException with the description "Cipher operation failed". The error is not thrown if the input is a multiple of the cipher's block size, in this case a multiple of 8. Othe

RE: 3rd party ECC module + NSS integration

Well...I couldn't figure out how to grab any version close to that so I just grabbed the NSPR/NSS heads and I was able to run the command: certutil -d . -R -h "Certicom FIPS Cert/Key Services" -k ec -q nistp256 -s "CN=cfu1003" -o req.1003b I dumped the ASN1 and it looks ok. I'll continue on with

RE: distribute our CA to users

You may find this recent thread informative: http://groups.google.com/group/mozilla.dev.tech.crypto/browse_thread/thr ead/5885eb5986864447 Dave > -Original Message- > From: > [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] la.org] On Behalf Of jehan procaccia > Sent: Wednesday, July 16, 2

distribute our CA to users

hello, I found from http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html how to import our CA (Internal PKI) in firefox3. Now I want to distribute cert8.db and key3.db to all new users and also to current users who already have a profile. How can I do that ? When a user first s

Re: Decline in firefox usage due to lacking CA certificates

Frank Hecker wrote: > As it happens, I will be starting the first public comment period for > T-Systems today. That really is good news! > We are doing what we can. However by design we do not simply > "rubber-stamp" CA requests. We have an official policy which was > developed through a proce

Re: Compiling NSS & NSPR on OS X 10.5.4 in 64 bits mod

NSPR, NSS, and JSS haven't been ported to 64-bit Mac OS X yet. We have open bugs for this issue: https://bugzilla.mozilla.org/show_bug.cgi?id=370766 https://bugzilla.mozilla.org/show_bug.cgi?id=379673 Since I have never tried to compile NSPR in 64-bit on Mac OS X, I haven't seen the problem with C

RE: 3rd party ECC module + NSS integration

Nelson, I'm using NSS 3.11.4 according to the Dogtag instructions. You mention 3.11.10 has the fix. I don't see that on the ftp in the normal nss releases area. Do I have to pull it from cvs? If so, would you mind supplying the correct tag? Is NSPR 4.7 OK with that or another needed? Dave >

Re: Decline in firefox usage due to lacking CA certificates

Thorsten Becker wrote: > I'm responsible for a university site in Germany that is SSL secured, > with a certificate issued by a CA which is trusted by T-Systems. The > T-Systems cert is not (yet) included in firefox, the details can be seen > in Bug 378882. As it happens, I will be starting th

Decline in firefox usage due to lacking CA certificates

Hello, I'm responsible for a university site in Germany that is SSL secured, with a certificate issued by a CA which is trusted by T-Systems. The T-Systems cert is not (yet) included in firefox, the details can be seen in Bug 378882. I'm currently seeing more and more Firefox users migrating t

Compiling NSS & NSPR on OS X 10.5.4 in 64 bits mode

Hello, I have been trying to use Java's SunPKCS11 provider using Mozilla's NSS librairies for the past few days without any luck. Readers interested in the symptoms can visit the folowing URL: http://forum.java.sun.com/thread.jspa?threadID=5312745&tstart=0 Anyway, it turned out that my libr