Re: SHA256 certificate support in Firefox.

2010-03-18 Thread Nelson B Bolyard
On 2010/03/18 20:09 PST, Gen Kanai wrote: > KISA = Korea Internet Security Agency (a Korean government body that > manages infosec policy.) Yeah, the NSS team has had a fair amount of interaction with KISA in the past, such as when we integrated their implementations of SEED and the TLS SEED ciphe

Re: SHA256 certificate support in Firefox.

2010-03-18 Thread Nelson B Bolyard
On 2010/03/18 19:55 PST, Mountie Lee wrote: > Hi. all. I'm Mountie Lee of PayGate, Korea. Welcome. > in Korea, National PKI is becoming big issue maker. one of good > considerations is storing National Certificate to Browser KeyStore. Are you talking about a root CA certificate? Or a user's own

Re: SHA256 certificate support in Firefox.

2010-03-18 Thread Akira Machida
Hi! On Mar 19, 12:22 pm, Mountie Lee wrote: > Hi. > thanks for your fast reply. > > I understand NSS support SHA256 from 2003 with version 3.8 > > does the latest firefox use the latest NSS library? > > best regards. > mountie. Current Firefox 3.5.8 and 3.6.1 seem to include NSS 3.12.5. regar

Re: SHA256 certificate support in Firefox.

2010-03-18 Thread Mountie Lee
Hi. thanks for your fast reply. I understand NSS support SHA256 from 2003 with version 3.8 does the latest firefox use the latest NSS library? best regards. mountie. On Fri, Mar 19, 2010 at 12:06 PM, Kurt Seifried wrote: > Replying off list. > > 10 April 2003: NSS 3.8 Release > > The new feat

Re: SHA256 certificate support in Firefox.

2010-03-18 Thread Gen Kanai
KISA = Korea Internet Security Agency (a Korean government body that manages infosec policy.) http://www.kisa.or.kr/eng/index.jsp On 3/19/10 11:55 AM, Mountie Lee wrote: > Hi. all. > I'm Mountie Lee of PayGate, Korea. > > in Korea, National PKI is becoming big issue maker. > one of good considera

SHA256 certificate support in Firefox.

2010-03-18 Thread Mountie Lee
Hi. all. I'm Mountie Lee of PayGate, Korea. in Korea, National PKI is becoming big issue maker. one of good considerations is storing National Certificate to Browser KeyStore. also KISA has planned to upgrade certificate specification using SHA256 hash algorithm in next year. but current firefox

Re: Cipher not picked/enabled in a TLS session

2010-03-18 Thread Gregory BELLIER
Nelson B Bolyard wrote: Sounds like you're not running your build. Are you perhaps still getting the 'system" libraries in your tests, rather than your own built libs? I made some progress today. Damn Nelson, you were right. I got to say I don't know where else it could have been from but

Re: Cipher not picked/enabled in a TLS session

2010-03-18 Thread Gregory BELLIER
Wan-Teh Chang wrote: Without looking at your code, I'm afraid that we won't be able to help much. Yes, I know it's difficult to guess what I may have done. That's why I provide in attachment a patch supposed to provide a "new" cipher named MYC as MYCipher. It is actually SEED. You probab

Re: Idea for SoC-Project implementing PSS in NSS

2010-03-18 Thread Gervase Markham
On 17/03/10 14:57, Wan-Teh Chang wrote: Please use the official page instead: https://wiki.mozilla.org/Community:SummerOfCode10 You can't edit that page :-) Put stuff on the Brainstorming page and I'll move it over. Gerv -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https