Re: NSS and PKCS#11 versions of modules

2008-12-10 Thread Nelson B Bolyard
Robert Relyea wrote, On 2008-12-10 17:12: > Nelson B Bolyard wrote: >> I think you're talking about a common implementation where the token and >> reader are one and the same, and the act of connecting the token also >> connects a new reader. One way to implement that in PKCS#11 is to add a >> slo

Re: SECOM Trust EV root inclusion request

2008-12-10 Thread Frank Hecker
Frank Hecker wrote: As it turns out, the latest WebTrust report for SECOM Trust (for 2008) is actually available from the WebTrust site [1]: http://cert.webtrust.org/SealFile?seal=816&file=pdf My mistake. This report is for SECOM Trust.net Root1 CA (ValiCert Class 1 Policy Validation CA) and

Re: Rosetta stones for nss / Mac / Win crypto?

2008-12-10 Thread Wan-Teh Chang
On Wed, Dec 10, 2008 at 4:40 PM, DanKegel <[EMAIL PROTECTED]> wrote: > Are there good examples of cross-platform projects that build against > either Windows, Mac, or nss crypto libraries? > Then somebody porting code from one library to another > could look at how the cross-platform project did it

Re: NSS and PKCS#11 versions of modules

2008-12-10 Thread Robert Relyea
Nelson B Bolyard wrote: Firefox does not allow removal. It'll be a small change to the code to handle removal, though it makes the slot checks more expensive. If you could write a bug up I'd appreciate it. I don't recall the details now, but as I recall, there was some nasty problem

Re: SECOM Trust EV root inclusion request

2008-12-10 Thread Eddy Nigg
On 12/06/2008 08:33 AM, Frank Hecker: However if there are outstanding issues that in my opinion are relevant, then I'm going to postpone further consideration of the request. This will allow time to try to get the issues resolved, after which we can start a new public discussion period. Besid

Rosetta stones for nss / Mac / Win crypto?

2008-12-10 Thread DanKegel
Are there good examples of cross-platform projects that build against either Windows, Mac, or nss crypto libraries? Then somebody porting code from one library to another could look at how the cross-platform project did it in both libraries. http://src.chromium.org/viewvc/chrome/trunk/src/net/base

Re: NSS and PKCS#11 versions of modules

2008-12-10 Thread Nelson B Bolyard
Martin Paljak wrote, On 2008-12-10 03:50: > On 10.12.2008, at 8:08, Nelson Bolyard wrote: >> Robert Relyea wrote: >>> Martin Paljak wrote: Thanks for tips! Could you point me to the line in spec where it says that slots can only be added. I cant find the place where it forbids remo

Re: NSS and PKCS#11 versions of modules

2008-12-10 Thread Martin Paljak
On 10.12.2008, at 8:08, Nelson Bolyard wrote: Robert Relyea wrote: Martin Paljak wrote: Thanks for tips! Could you point me to the line in spec where it says that slots can only be added. I cant find the place where it forbids removing. That's what I get for not checking the spec after th

Re: NSS and PKCS#11 versions of modules

2008-12-10 Thread Martin Paljak
On 09.12.2008, at 22:17, Robert Relyea wrote: Martin Paljak wrote: Thanks for tips! Could you point me to the line in spec where it says that slots can only be added. I cant find the place where it forbids removing. That's what I get for not checking the spec after the meeting in which we d

RE: mod_nss OCSP failover to CRL

2008-12-10 Thread David Stutzman
http://directory.fedoraproject.org/wiki/Mod_revocator This *might* help… Dave ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: mod_nss OCSP failover to CRL

2008-12-10 Thread sg4all
2008/12/10 Robert Relyea <[EMAIL PROTECTED]> > sg4all wrote: > >> Hi, >> >> >> I'm trying to set up a apache webserver with mod_nss. When available, OCSP >> should be used to verify the validity of the certificate. When the OCSP is >> >> unavailable, CRLs are used. >> >> I installed the CRLS, and