Re: OpenLDAP and NSS

Julien R Pierre - Sun Microsystems wrote: Michael, Michael Ströder wrote: Wan-Teh Chang wrote: Most NSS-based server applications open the NSS databases in read-only mode, so they can run with multiple processes safely. But client applications such as Firefox and Thunderbird open the

RE: Importing symmetric keys to NSS from Java code

Thanks once again for detailed explanation of NSS infrastructure. > Now, one well known technique, used by applications that do not wish to > achieve FIPS compliance but are nonetheless constrained (for some reason) > to use a FIPS crypto module, is this: generate a symmetric key in the > FIPS mo

Re: programatically import a certificate into firefox

On 8 août, 16:52, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote, On 2008-08-08 05:49: > > > I would like to have certificate automatically imported into the > > browser even before the user first login so that he do not get the > > prompt. This need is for a prticular use-ca

Re: How I do find the client cert in browser of a cert-based mutually authenticated session?

Thanks Nelson. Please see my in-line responses. Nelson Bolyard wrote: > Subrata Mazumdar wrote, On 2008-08-12 20:30: > > >> I have a certificate based mutually authenticated session between the >> browser and a web server. >> I would like to find out the certificate used presented by the brows

Re: Comparison of OpenSSL and NSS

Nelson Bolyard wrote: > > When you trust a cert as a peer, you trust it for all the names that > appear in that cert, just as if it had been issued by a CA you trust. > If it has 50 subject alt names, or a wildcard name, you trust that cert > for all those names. > > It turned out that browser us

Re: UTN-USERFirst-Object - "Can't verify signature

Just a note, I have submitted this bug report. It is bug #6149286 on bugreport.apple.com. The text of the report follows. -Kyle H * SUMMARY Java mispresents a properly-signed applet as "Java cannot verify the authenticity of the signature's certificate". * STEPS TO REPRODUCE On a freshly-insta

Re: UTN-USERFirst-Object - "Can't verify signature

Since this same warning shows up even going to the same location (https://jogl-demos.dev.java.net/applettest.html) under Safari, it's definitely not Firefox-related. http://bugreport.apple.com/ is the best way to report this, since Apple maintains its own Java distribution for OS X (you cannot get

Re: Comparison of OpenSSL and NSS

Nelson Bolyard wrote, On 2008-08-12 22:59: > I didn't understand that very well, but I _think_ you're saying that if > adding a CA cert that trusted to issue client certs causes that CA to also > be trusted to issue server certs, that would be bad. > > Indeed, that would be bad, and it definitely

Re: How I do find the client cert in browser of a cert-based mutually authenticated session?

Subrata Mazumdar wrote, On 2008-08-12 20:30: > I have a certificate based mutually authenticated session between the > browser and a web server. > I would like to find out the certificate used presented by the browser > using a programmatic API. I gather that you want to do this in the browser?

Re: JSS´s SignerInfo crashes firefox 3.0. 1 and firefox 3 in Windows

fercufer wrote, On 2008-08-13 06:52: > SignerInfo crashes firefox 3 in Windows. Below I put the code and the > log files with Firefox 3.0.1 > > I have found a page about this bug. > http://support.mozilla.com/tiki-view_forum_thread.php?locale=lt&forumId=1&comments_parentId=86104 > But there isn´t

Re: UTN-USERFirst-Object - "Can't verify signature

bmo wrote on 2008-08-11 20:22 PDT: > Summary: I suspect that there's something wrong with the BUILT-IN Root > CA cert UTN-USERFirst-Object in Firefox 3.0.1. > > We were issued a code signing certificate which was signed by the UTN- > USERFirst-Object cert built into Firefox (Comodo issues these).