Re: Problems importing PKCS #12 client certs

2010-02-14 Thread Subrata Mazumdar
Hi, My experience so far is that PSM Certificate Manager is never launched when PKCS#12 link is clicked. Not on Windows. Not on Linux (as described by the bug filer). Do not remember for Mac OS X. Here is what I think is the explanation for the behavior on windows: On Windows PKCS#12 file ty

Problems importing PKCS #12 client certs

2010-02-14 Thread Gen Kanai
Hello everyone, Bug 542441 claims that Gecko/Firefox is not importing PKCS#12 client certs. https://bugzilla.mozilla.org/show_bug.cgi?id=542441 I am also being told by the bug filer that IE, Opera, Chrome and Safari have no problems importing PKCS#12 certs. Could those of you who have more expe

Re: Fix for the TLS renegotiation bug

2010-02-14 Thread Eddy Nigg
On 02/14/2010 07:28 PM, Daniel Veditz: To solve the problem for real in the long run both servers and clients need to be patched, and patched clients and servers must not talk to unpatched servers and clients. In the short run that's unrealistic so the Firefox settings are currently extremely per

Fix for the TLS renegotiation bug

2010-02-14 Thread Daniel Veditz
I'm surprised not to see it mentioned here yet, but Firefox nightlies implement the new TLS spec to prevent the renegotiation flaw. The fixes in NSS can also be used to build your own patched version of moz_nss for apache. Huge thanks to Nelson Bolyard for implementing the spec in NSS and Kai Enge