Re: Questions on NSS_Shutdown () and Firefox crash

2008-08-17 Thread Howard Chu
Nelson B Bolyard wrote: > Previously, someone criticized NSS, saying that it was designed for use > only on single-user systems, a criticism that I dispute. NSS is very much > oriented toward each user have his own set of trusted flags. In contrast to > NSS, the idea that there is only one system

Re: Questions on NSS_Shutdown () and Firefox crash

2008-08-17 Thread Kyle Hamilton
OpenSSL does not have a root-certificate program. The official position (from http://www.openssl.org/support/faq.html#USER16) is that the job of OpenSSL is to create the code to make trust possible, not dictate who to trust. In fact, that same FAQ entry has a pointer to an article on extracting t

Re: Questions on NSS_Shutdown () and Firefox crash

2008-08-17 Thread Daniel Stenberg
On Sat, 16 Aug 2008, Nelson B Bolyard wrote: >> curl is completely independent from browsers, and when installed in systems >> it usually uses the system-wide CA cert bundle. Of course it has command >> line options to allow the user to specify what CA bundle to use (or indeed >> other certs et

Re: Questions on NSS_Shutdown () and Firefox crash

2008-08-17 Thread Howard Chu
Nelson B Bolyard wrote: > Howard Chu wrote, On 2008-08-16 17:03: >> What software is that? The docs say NSS_Init must only be called once; this >> would only be a problem if a piece of code called NSS_Init multiple times and >> still only called NSS_Shutdown once. Code written that way is clearly b