Re: Fix for the TLS renegotiation bug

2010-02-19 Thread Eddy Nigg
On 02/20/2010 12:22 AM, Eddy Nigg: On 02/19/2010 08:59 PM, Jean-Marc Desperrier: I just tried configuring a similar configuration, and thought more and more whilst doing that it doesn't make sense, that it can't fail in the way you described. And it doesn't (with two ports, but it definitively

Re: Fix for the TLS renegotiation bug

2010-02-19 Thread Eddy Nigg
On 02/19/2010 08:59 PM, Jean-Marc Desperrier: I just tried configuring a similar configuration, and thought more and more whilst doing that it doesn't make sense, that it can't fail in the way you described. And it doesn't (with two ports, but it definitively would be the same with two IP). B

Re: Fix for the TLS renegotiation bug

2010-02-19 Thread Jean-Marc Desperrier
Eddy Nigg wrote: Trying the different sub domain trick doesn't work on the same server but different host and IP. I assume that's because the server reuses the cached SSL session and initiates a renegotiation upon certificate authentication. Does that make sense so far? I just tried configuring

Re: List/remove cached S/MIME capabilities

2010-02-19 Thread Jean-Marc Desperrier
Michael Ströder wrote: This is because some influential people consider: > * S/MIME caps are just a part of "mail security protocol" Which is IMO complete non-sense. Yes, and I don't believe this is the major reason why it's not possible in Seamonkey/Thunderbird. The main reason is that

Re: List/remove cached S/MIME capabilities

2010-02-19 Thread Michael Ströder
Konstantin Andreev wrote: > No. No such mail client exists that allow tune/edit recipient's S/MIME > caps. > > This is because some influential people consider: > > * S/MIME caps are just a part of "mail security protocol" > * protocol shouldn't be exposed to end user to prevent security > c

Re: Fix for the TLS renegotiation bug

2010-02-19 Thread Eddy Nigg
Eddy Nigg wrote: Trying the different sub domain trick doesn't work on the same server but different host and IP. Let me phrase this explicitly : - You use only one Apache instance Correct. - You configured two virtual hosts inside that instance - either each virtual host listens on a di

Re: Fix for the TLS renegotiation bug

2010-02-19 Thread Jean-Marc Desperrier
Eddy Nigg wrote: Trying the different sub domain trick doesn't work on the same server but different host and IP. Let me phrase this explicitly : - You use only one Apache instance - You configured two virtual hosts inside that instance - Then : - either each virtual host listens on

SOLVED: Using existing NSS/NSPR DLLs from Firefox in another app on OS/2

2010-02-19 Thread Marty
For anyone who might have cared, it looks like this is a case of missing some of the Firefox DLLs from my program's search path. It looks (behavior-wise... haven't checked the code) like the OS/2-specific code for the dynamic loader in SECMOD_AddNewModule is not checking its return codes for f