Re: Updates on bug number 427715

2008-08-27 Thread Julien R Pierre - Sun Microsystems
Generally the most useful information is in bugzilla. From reading https://bugzilla.mozilla.org/show_bug.cgi?query_format=specific&order=relevance+desc&bug_status=__open__&id=427715 it appears the bug is still open . Ruchi Lohani wrote: > Hi, > > Is the bug filed with number 427715 fixed. The b

Updates on bug number 427715

2008-08-27 Thread Ruchi Lohani
Hi, Is the bug filed with number 427715 fixed. The browser is crashing because of NSS. It would be great if somebody can tell me about it. Thanks Ruchi ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Nelson B Bolyard wrote: > Michael Kaply wrote: >> For the record, I just checked my Windows machine (where all this works) >> >> It's NSS 3.11 >> >> The extra "thawte" is not in the database >> >> c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u >> Thawte Code Signing CA - Thawte

Re: Unable to use signtool on Mac

2008-08-27 Thread Nelson B Bolyard
Julien R Pierre - Sun Microsystems wrote: > Michael, > > Michael Kaply wrote: >> I was using 3.12 which is the only 3.12 version available here >> >> ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/ >> >> > > OK. 3.12.1 was very recently released (last week), but I guess we > haven't

Re: Unable to use signtool on Mac

2008-08-27 Thread Nelson B Bolyard
Michael Kaply wrote: > For the record, I just checked my Windows machine (where all this works) > > It's NSS 3.11 > > The extra "thawte" is not in the database > > c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u > Thawte Code Signing CA - Thawte Consulting ccc,

Re: Unable to use signtool on Mac

2008-08-27 Thread Julien R Pierre - Sun Microsystems
Michael, Michael Kaply wrote: > > I was using 3.12 which is the only 3.12 version available here > > ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/ > > OK. 3.12.1 was very recently released (last week), but I guess we haven't uploaded a source tarball for it yet. If you have a

Re: Unable to use signtool on Mac

2008-08-27 Thread Julien R Pierre - Sun Microsystems
Mike, Michael Kaply wrote: > For the record, everything works fine with an NSS 3.12 that I built on > my machine. > > So I don't know if it is an NSS 3.11 problem (which might be the case > since other people have reported it) or a problem with darwin ports > (which I doubt) > > Mike Kaply F

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Julien R Pierre - Sun Microsystems wrote: > Mike, > > Michael Kaply wrote: >> For the record, everything works fine with an NSS 3.12 that I built on >> my machine. >> >> So I don't know if it is an NSS 3.11 problem (which might be the case >> since other people have reported it) or a problem wit

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
For the record, I just checked my Windows machine (where all this works) It's NSS 3.11 The extra "thawte" is not in the database c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u Thawte Code Signing CA - Thawte Consulting ccc,,c I used exactly the same PFX file

Re: Unable to use signtool on Mac

2008-08-27 Thread Julien R Pierre - Sun Microsystems
Mike, Michael Kaply wrote: > For the record, everything works fine with an NSS 3.12 that I built on > my machine. > > So I don't know if it is an NSS 3.11 problem (which might be the case > since other people have reported it) or a problem with darwin ports > (which I doubt) > > Mike Kaply T

Re: Unable to use signtool on Mac

2008-08-27 Thread Nelson B Bolyard
Michael Kaply wrote: > Nelson B Bolyard wrote: >> what does >> certutil -d ~ -L >> output? > > c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u > Thawte Code Signing CA - Thawte Consulting ccc,c,c > thawte c

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Nelson B Bolyard wrote: > Michael Kaply wrote: >> Nelson B Bolyard wrote: > >>> what does >>> certutil -d ~ -L >>> output? >> c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u >> Thawte Code Signing CA - Thawte Consulting ccc,c,c >> thawte

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Nelson B Bolyard wrote: > Michael Kaply wrote: >> Wan-Teh Chang wrote:> >>> Please provide the signtool command line you used, and the >>> content of the relevant directories. >>> >>> "An I/O error occurred during security authorization" is >>> SEC_ERROR_IO. This error often has nothing to do >>>

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
With NSS 3.12 it looks like this after import (and works) c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u Thawte Code Signing CA - Thawte Consulting cc,, ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.or

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
For the record, everything works fine with an NSS 3.12 that I built on my machine. So I don't know if it is an NSS 3.11 problem (which might be the case since other people have reported it) or a problem with darwin ports (which I doubt) Mike Kaply __

Re: Unable to use signtool on Mac

2008-08-27 Thread Nelson B Bolyard
Michael Kaply wrote: > Wan-Teh Chang wrote:> >> Please provide the signtool command line you used, and the >> content of the relevant directories. >> >> "An I/O error occurred during security authorization" is >> SEC_ERROR_IO. This error often has nothing to do >> with I/O. SEC_ERROR_IO is report

Re: Dan Kaminsky's DNS talk discusses SSL

2008-08-27 Thread Eddy Nigg
Gervase Markham: > Eddy Nigg wrote: >> I wouldn't state it this way, otherwise we urgently need to modify the >> Mozilla CA policy! An attacker shouldn't be successful in such an >> attempt and CAs should have controls in place to detect such attempts. > > If that's true, then what controls to Star

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Wan-Teh Chang wrote:> > Please provide the signtool command line you used, and the > content of the relevant directories. > > "An I/O error occurred during security authorization" is > SEC_ERROR_IO. This error often has nothing to do > with I/O. SEC_ERROR_IO is reported when > libsoftokn3.dylib

Re: Unable to use signtool on Mac

2008-08-27 Thread Wan-Teh Chang
On Wed, Aug 27, 2008 at 8:34 AM, Michael Kaply <[EMAIL PROTECTED]> wrote: > I'm having a problem signing my Firefox extension on Mac OS X. The error > I get is: > > signtool: function failed: An I/O error occurred during security > authorization. > > > I built NSS and NSPR myself using Darwin Ports

Re: Dan Kaminsky's DNS talk discusses SSL

2008-08-27 Thread Gervase Markham
Eddy Nigg wrote: > I wouldn't state it this way, otherwise we urgently need to modify the > Mozilla CA policy! An attacker shouldn't be successful in such an > attempt and CAs should have controls in place to detect such attempts. If that's true, then what controls to Startcom (to take an example)

Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
I'm having a problem signing my Firefox extension on Mac OS X. The error I get is: signtool: function failed: An I/O error occurred during security authorization. I built NSS and NSPR myself using Darwin Ports sudo port install nspr (4.7_1) sudo port install nss (3.11.9_0) I have had no

Re: inserting own extended validation certificate root

2008-08-27 Thread mail . an . jakob
Hi, basically, I want to play around with EVN for documentation and development purposes, and the only way of getting a "cheap" certificate is creating one on my own... so a pointer would be welcome. Thanks Jakob ___ dev-tech-crypto mailing list dev-tec

Re: cmsutil -R generating orphan key

2008-08-27 Thread Momcilo Majic
Hi, Before posting a bug I will rebuild the NSS with complete set of elliptic curves from NSS_3_11_1_RTM, and than try to create another certificate request, sign-it and import it again. My previous build was based on 3.12 with update based on solaris ecl-curve.h, I've run diff, and it seams that