Re: [Fwd: How to display the cause of an SSL client authentication failure]

2009-10-05 Thread Eddy Nigg
On 10/06/2009 12:48 AM, Robert Relyea: This is the default settings. Hasn't been for over a year now... https://bugzilla.mozilla.org/show_bug.cgi?id=295922 Oh, sorry, that's my mistake, I meant the remember flag. It's not an unreasonable work around, and probably your best choice i

Re: [Fwd: How to display the cause of an SSL client authentication failure]

2009-10-05 Thread Robert Relyea
On 10/05/2009 11:38 AM, Eddy Nigg wrote: > Thanks Bob, > > On 10/05/2009 07:39 PM, Robert Relyea: >> FF does not just resend the same certificate unless you have 'Select >> Automatically' turned on. >> > > This is the default settings. Hasn't been for over a year now... https://bugzilla.mozill

Re: Which way to decode DER ASN1 CHOICE ?

2009-10-05 Thread Nelson B Bolyard
On 2009-10-05 02:20 PDT, Konstantin Andreev wrote: > Hello. > > I need to decode some DER-encoded ASN1 CHOICE, but I can't manage this in > a reasonable way. FYI, the documentation on NSS's ASN.1 encoder and its two decoders is at http://www.mozilla.org/projects/security/pki/nss/tech-notes/tn1.ht

Re: [Fwd: How to display the cause of an SSL client authentication failure]

2009-10-05 Thread Eddy Nigg
Thanks Bob, On 10/05/2009 07:39 PM, Robert Relyea: FF does not just resend the same certificate unless you have 'Select Automatically' turned on. This is the default settings. I don't think anyone is doubting that both FF and IE have some problems with the way they handle client auth. Mo

Re: How should I handle CKA_NETSCAPE_DB for GOST private keys ?

2009-10-05 Thread Robert Relyea
On 10/05/2009 10:42 AM, Robert Relyea wrote: > On 10/05/2009 09:27 AM, Konstantin Andreev wrote: > >> Hello. >> >> In the source code of the "softoken" library I see various conditional >> manipulations with CKA_NETSCAPE_DB attribute of private keys. >> >> Since I am adding a new (GOST) type of

Re: fastest modular exponentiation in Mozilla JavaScript

2009-10-05 Thread Robert Relyea
On 10/04/2009 12:38 PM, Péter Szabó wrote: > Hi, > > I need a function which can do fast modular exponentiation on 2048-bit > integers. I'd like to call this function from JavaScript running in > Mozilla (Firefox 3.0 or later) displaying a web page. Is there such a > function or do I have to implem

Re: How should I handle CKA_NETSCAPE_DB for GOST private keys ?

2009-10-05 Thread Robert Relyea
On 10/05/2009 09:27 AM, Konstantin Andreev wrote: > Hello. > > In the source code of the "softoken" library I see various conditional > manipulations with CKA_NETSCAPE_DB attribute of private keys. > > Since I am adding a new (GOST) type of private key to NSS, I need to > know how CKA_NETSCAPE_DB s

Re: [Fwd: How to display the cause of an SSL client authentication failure]

2009-10-05 Thread Robert Relyea
On 10/04/2009 08:57 PM, Eddy Nigg wrote: > On 10/05/2009 05:49 AM, Eddy Nigg: >> >> So the server sent a nice error page as you say, most browsers >> including Firefox and Explorer will have to be completly restarted in >> order to authenticate again. Or the servers session is set to a very >> shor

fastest modular exponentiation in Mozilla JavaScript

2009-10-05 Thread Péter Szabó
Hi, I need a function which can do fast modular exponentiation on 2048-bit integers. I'd like to call this function from JavaScript running in Mozilla (Firefox 3.0 or later) displaying a web page. Is there such a function or do I have to implement in pure JavaScript? Although it is quite optimized

How should I handle CKA_NETSCAPE_DB for GOST private keys ?

2009-10-05 Thread Konstantin Andreev
Hello. In the source code of the "softoken" library I see various conditional manipulations with CKA_NETSCAPE_DB attribute of private keys. Since I am adding a new (GOST) type of private key to NSS, I need to know how CKA_NETSCAPE_DB should apply to this key. But I haven't found enough inform

Re: [Fwd: How to display the cause of an SSL client authentication failure]

2009-10-05 Thread Ian G
On 05/10/2009 01:24, Peter Djalaliev wrote: It is our standard security nightmare. Side A thinks it is Side B's problem. Side B thinks it is Side A's problem. In the meantime the user doesn't use the tech because it doesn't work, and the sides are too busy arguing to solve the problem. So z

Which way to decode DER ASN1 CHOICE ?

2009-10-05 Thread Konstantin Andreev
Hello. I need to decode some DER-encoded ASN1 CHOICE, but I can't manage this in a reasonable way. This is how I have managed this at the moment (pseudo-code): ---( begin code )- struct { SECItem choice1; SECItem choice2; ... SECItem choiceN; } deco