Re: Why does SSL_GetChannelInfo return a 0 channel.cipherSuite?

Wan-Teh Chang wrote, On 2008-12-08 17:38: > In NSS's SSL test programs selfserv.c, tstclnt.c, and strsclnt.c, we have > code like this: > > 139 result = SSL_GetChannelInfo(fd, &channel, sizeof channel); > 140 if (result == SECSuccess && > 141 channel.length == sizeof channel && > 1

Re: SECOM Trust EV root inclusion request

On 12/06/2008 08:33 AM, Frank Hecker: * SECOM Trust had one caveat on their EV audit, having to do with their not performing certain background checks on staff. As noted in Kathleen Wilson's summary document (attached to the bug), this is apparently a side-effect of Japanese laws and regulations

Why does SSL_GetChannelInfo return a 0 channel.cipherSuite?

In NSS's SSL test programs selfserv.c, tstclnt.c, and strsclnt.c, we have code like this: 139 result = SSL_GetChannelInfo(fd, &channel, sizeof channel); 140 if (result == SECSuccess && 141 channel.length == sizeof channel && 142 channel.cipherSuite) { 143 result = S

Re: UTF8 support in the Firefox certificate store?

[EMAIL PROTECTED] wrote: Initially I posted this on another support forum, but was kindly requested to post here instead: For a screendump please refer to: http://www.vandersman.org/certstore.PNG Interesting. The sequence ?? in the cert isn't valid thai. ? is a vowel (roughly 'a' as in fath

Re: Creating a Global User-level CA/Trust Infrastructure for Secure Messaging

Frank Hecker wrote: Nelson B Bolyard wrote: What does "https cannot be easily shared across one IP numbers" mean? I presume Ian is referring to the case of multiple virtual hosts sharing a single IP address (due to lack of SNI support in deployed versions of Apache). Yes; one Apache http

Re: Creating a Global User-level CA/Trust Infrastructure for Secure Messaging

Nelson B Bolyard wrote: What does "https cannot be easily shared across one IP numbers" mean? I presume Ian is referring to the case of multiple virtual hosts sharing a single IP address (due to lack of SNI support in deployed versions of Apache). Frank -- Frank Hecker [EMAIL PROTECTED] __

Re: Can NSS ECC algorithms be used for IPSec?

[EMAIL PROTECTED] wrote, On 2008-12-08 07:00: > I see, that NSS has many crypto algorithms. I'm trying to make crypto > plugin for IPSec. I need to use ECC algorithms (ECDSA, ECDH). So. Are > the NSS ECC algorithms compatible with IPSec (I mean key strength)? In ECC, key strength is determined by

Re: Creating a Global User-level CA/Trust Infrastructure for Secure Messaging

Ian G wrote, On 2008-12-04 05:38: > The first cause of the failure to use SSL for security is that https > cannot be easily shared across one IP numbers, a crucial, limited > resource. What does "https cannot be easily shared across one IP numbers" mean? ___

Can NSS ECC algorithms be used for IPSec?

I see, that NSS has many crypto algorithms. I'm trying to make crypto plugin for IPSec. I need to use ECC algorithms (ECDSA, ECDH). So. Are the NSS ECC algorithms compatible with IPSec (I mean key strength)? Thanks for any help. ___ dev-tech-crypto maili

Re: Anders' p2 challenge

Anders Rundgren wrote: Hi Guys, Thank you for taking on the p2 challenge! Although the responses were rather different, AFAICT, they all required new security infrastructure Good to remind this slightly obscure requirement :) beyond what is offered by the enterprise (employee) PKI which is

Re: Anders' p2 challenge

Hi Guys, Thank you for taking on the p2 challenge! Although the responses were rather different, AFAICT, they all required new security infrastructure beyond what is offered by the enterprise (employee) PKI which is (from my perspective) the interesting part since the consultants that for examp