Re: need help cross compiling nss

2009-10-14 Thread Robert Relyea
On 10/14/2009 02:46 PM, CB wrote: > I'm using WindRiver Linux 2.0 to cross compile nss to a PowerPC. The > 3.11.4 build instructions and troubleshooting don't cover something > like this. Can someone point me to documentation that would describe > how to set the compiler, flags, install location,

Re: Does any free email CA offer certs with multiple email addresses?

2009-10-14 Thread Eddy Nigg
On 10/15/2009 01:35 AM, Eddy Nigg: On 10/14/2009 10:20 PM, Alaric Dailey: StartCom does... not yet. I'm sure you meant multiple domain and sub domains, not email addresses. However we plan to support multiple email addresses hopefully already before the end of the year in the Class 2

Re: Does any free email CA offer certs with multiple email addresses?

2009-10-14 Thread Eddy Nigg
On 10/14/2009 10:20 PM, Alaric Dailey: StartCom does... not yet. I'm sure you meant multiple domain and sub domains, not email addresses. However we plan to support multiple email addresses hopefully already before the end of the year in the Class 2 settings and above, including EV, b

Re: SEC_ERROR_EXTENSION_NOT_FOUND

2009-10-14 Thread Nelson B Bolyard
On 2009-10-14 05:27 PDT, star_ni...@my-deja.com wrote: > Nelson, > >Thank you for your response. > > The module is an access manager Apache agent module from Sun > (libamapc2). This gets loaded when Apache starts and handles handles > authentication of AM protected applications. > > You are

need help cross compiling nss

2009-10-14 Thread CB
I'm using WindRiver Linux 2.0 to cross compile nss to a PowerPC. The 3.11.4 build instructions and troubleshooting don't cover something like this. Can someone point me to documentation that would describe how to set the compiler, flags, install location, etc...? -- dev-tech-crypto mailing list d

Re: How to "log out" of SDR?

2009-10-14 Thread Robert Relyea
On 10/14/2009 11:16 AM, Nelson B Bolyard wrote: > By the way, I REALLY REALLY wish that the password manager would use that > when you click the button to reveal the passwords, instead of doing what > it does now, which forces you to re-enter the master password, even if > you've JUST entered it. >

Re: How to "log out" of SDR?

2009-10-14 Thread Robert Relyea
On 10/13/2009 02:10 AM, Neil wrote: > This is probably PSM again, but I hope someone here can answer it, or > point me somewhere. > > We have a both menuitem and a dialog that logs you out of the SDR, so > that you need to reenter your Master Password to gain access to your > stored certificates an

RE: Does any free email CA offer certs with multiple email addresses?

2009-10-14 Thread Alaric Dailey
StartCom does. CAcert used to, though I don't know if they STILL do, I would guess so. > Date: Wed, 14 Oct 2009 12:18:37 -0700 > From: nel...@bolyard.me > To: dev-tech-crypto@lists.mozilla.org > Subject: Does any free email CA offer certs with multiple email addresses? > > You probably

Re: How to "log out" of SDR?

2009-10-14 Thread Kyle Hamilton
On Wed, Oct 14, 2009 at 12:23 PM, Nelson B Bolyard wrote: > On 2009-10-14 11:37 PDT, Honza Bambas wrote: >> Nelson B Bolyard wrote: > >>> By the way, I REALLY REALLY wish that the password manager would use that >>> when you click the button to reveal the passwords, instead of doing what >>> it do

Re: How to "log out" of SDR?

2009-10-14 Thread Nelson B Bolyard
On 2009-10-14 11:37 PDT, Honza Bambas wrote: > Nelson B Bolyard wrote: >> By the way, I REALLY REALLY wish that the password manager would use that >> when you click the button to reveal the passwords, instead of doing what >> it does now, which forces you to re-enter the master password, even if

Does any free email CA offer certs with multiple email addresses?

2009-10-14 Thread Nelson B Bolyard
You probably know by now that Thawte has announced an end to its free email certificate service. http://www.h-online.com/security/Thawte-discontinues-Web-of-Trust-for-free-SSL-certificates--/news/114447 https://siteseal.thawte.com/support/index.html?page=content&id=SO12658 This has caused many

Re: Making OCSP soft fail smarter

2009-10-14 Thread Robert Relyea
>> >> In summary, we have to be careful about 'doing something because it just >> seems right'. We need to truly understand the risks, and what we are >> getting for those risks. >> > > Bob, a way to mitigate attacks on OCSP responders (DOS) can be > mitigated to by also supporting CRLs at mul

Re: How to "log out" of SDR?

2009-10-14 Thread Honza Bambas
Nelson B Bolyard wrote: On 2009-10-14 01:33 PDT, Neil wrote: Nelson Bolyard wrote: I'll add these thoughts. I don't know of any way to "log in" to a token that has no password. IINM, such a token just "comes up" in a state that is similar to being already logged in. It's not surpris

Re: How to "log out" of SDR?

2009-10-14 Thread Nelson B Bolyard
On 2009-10-14 01:33 PDT, Neil wrote: > Nelson Bolyard wrote: > >> I'll add these thoughts. I don't know of any way to "log in" to a >> token that has no password. IINM, such a token just "comes up" in a >> state that is similar to being already logged in. It's not surprising >> to me that force

Re: How to "log out" of SDR?

2009-10-14 Thread Honza Bambas
Neil wrote: Nelson Bolyard wrote: I'll add these thoughts. I don't know of any way to "log in" to a token that has no password. IINM, such a token just "comes up" in a state that is similar to being already logged in. It's not surprising to me that forcefully logging it out leaves it in a

Re: SEC_ERROR_EXTENSION_NOT_FOUND

2009-10-14 Thread star_night
Nelson, Thank you for your response. The module is an access manager Apache agent module from Sun (libamapc2). This gets loaded when Apache starts and handles handles authentication of AM protected applications. You are correct that I don't see sec_error_ext_not_found in logs, but I found it

RE: Making OCSP soft fail smarter

2009-10-14 Thread Varga Viktor
> IMO putting OCSP or CRLs in public SSL certificates was never a > particularly good idea because the only likely case for a revocation > is when a CA fails to validate a customer. That has happened > but not often enough to motivate the building of new infrastructure. Dont forget the sale of t

Re: How to "log out" of SDR?

2009-10-14 Thread Neil
Nelson Bolyard wrote: I'll add these thoughts. I don't know of any way to "log in" to a token that has no password. IINM, such a token just "comes up" in a state that is similar to being already logged in. It's not surprising to me that forcefully logging it out leaves it in a state where i