Re: Is JSS 4.3.2 released? I'm looking for the Mozilla signed jar.

2010-05-04 Thread Bob Foss
Nelson B Bolyard wrote: On 2010-04-30 06:38 PST, Bob Foss wrote: There are no artifacts on the ftp site for JSS 4.3.2: ftp://ftp.mozilla.org/pub/mozilla.org/security/jss/releases/ Check again. You may find it has been updated. Thank you. -- dev-tech-crypto mailing list dev-tech-crypto@list

Re: Classification of client certificates by NSS / Mozilla Firefox

2010-05-04 Thread Robert Relyea
> That results in 2 questions from me: > > 1. What is the criteria of NSS for distinguishing between "own" and > "others" certificates? > > 2. I recently read that there is a hidden flag to mark a token > implementation as "friendly", allowing to search for certificates > without logging in. Is th

Re: Classification of client certificates by NSS / Mozilla Firefox

2010-05-04 Thread M.Hunstock
On 04.05.2010 18:42, Nelson B Bolyard wrote: > IIRC, NSS will expect that the private key object will have the same > CKA_ID attribute value as the CKA_ID attribute value on the certificate. oh yes.. I actually knew that and the application did it that way when putting the certs on the token. App

Re: Is JSS 4.3.2 released? I'm looking for the Mozilla signed jar.

2010-05-04 Thread Nelson B Bolyard
On 2010-04-30 06:38 PST, Bob Foss wrote: > There are no artifacts on the ftp site for JSS 4.3.2: > ftp://ftp.mozilla.org/pub/mozilla.org/security/jss/releases/ Check again. You may find it has been updated. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla

Re: Digital signature RSA 2048 and SHA 224,256 and more

2010-05-04 Thread Nelson B Bolyard
On 2010-05-04 08:24 PST, Frédéric SUEL wrote: > I would like to know if RSA 2048 digital signature with SHA hash (224, > 256 and more bit) is possible in Mozilla products. In particuler if i > can realise a RSA 2048/SHA 256 digital signature with Thunderbird 2.x > or 3.x The underlying NSS crypto

Re: Classification of client certificates by NSS / Mozilla Firefox

2010-05-04 Thread Nelson B Bolyard
On 2010-05-04 06:41 PST, M.Hunstock wrote: > Hi all, > > I am currently developing an application for cryptographic > personalization of smart cards. One of the important usage scenarios is > (of course) SSL client authentication via a web browser. Now that my app > "produces" cards, I have a stra

Re: TLSv1 and SSLv3 client_key_exchange Encryption-block formatting

2010-05-04 Thread Nelson B Bolyard
On 2010-05-04 05:41 PST, Ramon de Carvalho Valle wrote: >>> SSLTAP shows the ClientKeyExchange message length in client_key_exchange >>> (16) is 130 (0x82) for TLSv1 and 128 (0x80) for SSLv3. >> Yes, that is a difference between the two protocol versions. >> >> TLS encodes the encrypted pre-master

Digital signature RSA 2048 and SHA 224,256 and more

2010-05-04 Thread fsuel
Hi, I would like to know if RSA 2048 digital signature with SHA hash (224, 256 and more bit) is possible in Mozilla products. In particuler if i can realise a RSA 2048/SHA 256 digital signature with Thunderbird 2.x or 3.x It is possible to have the same response for ECDSA digital signature. Than

Re: Classification of client certificates by NSS / Mozilla Firefox

2010-05-04 Thread Honza Bambas
On 5/4/2010 3:41 PM, M.Hunstock wrote: 1. What is the criteria of NSS for distinguishing between "own" and "others" certificates? This function [1] used from [2] should return true for your certificate. If there is a private key, then you should see it in the user tab. However, the code f

Classification of client certificates by NSS / Mozilla Firefox

2010-05-04 Thread M.Hunstock
Hi all, I am currently developing an application for cryptographic personalization of smart cards. One of the important usage scenarios is (of course) SSL client authentication via a web browser. Now that my app "produces" cards, I have a strange effect when trying to use them. There is a PKCS#11

Re: TLSv1 and SSLv3 client_key_exchange Encryption-block formatting

2010-05-04 Thread Ramon de Carvalho Valle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Shailendra, On 05/04/2010 02:48 AM, Shailendra Shukla wrote: > On May 4, 12:58 am, Ramon de Carvalho Valle > wrote: > Hi, > > I'm having problems with my PKCS #11 implementation and mod_nss. The > requests using SSLv3 protocol fails with bad_reco

Re: TLSv1 and SSLv3 client_key_exchange Encryption-block formatting

2010-05-04 Thread Ramon de Carvalho Valle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Nelson, On 05/04/2010 03:11 AM, Nelson B Bolyard wrote: > On 2010-05-03 12:58 PST, Ramon de Carvalho Valle wrote: >> I'm having problems with my PKCS #11 implementation and mod_nss. The >> requests using SSLv3 protocol fails with bad_record_mac (20