Re: NSS Environment Variable to Disable 1024-bit Support?

2010-05-15 Thread Nelson B Bolyard
On 2010-05-15 01:35 PDT, Wan-Teh Chang wrote: > On Fri, May 14, 2010 at 11:18 PM, Nelson B Bolyard wrote: >> I looked through PSM for such a warning briefly. I found a warning for >> sites that use symmetric encryption of strength <= 90 bits, but I found >> nothing that specifically looks at publ

Re: Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert

2010-05-15 Thread Eddy Nigg
On 05/15/2010 02:41 PM, From Subrata Mazumdar: Hi, Hi Subrata, I can answer you some of the questions below. Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert? Yes, certainly. Since, value type of subjAltName is GeneralNames, I know I am allowed to do that

Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert

2010-05-15 Thread Subrata Mazumdar
Hi, Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert? Since, value type of subjAltName is GeneralNames, I know I am allowed to do that syntactically. My questions are : - Does this fall within the best practices for X.509 based PKI? - Are the NSS APIs des

Re: NSS Environment Variable to Disable 1024-bit Support?

2010-05-15 Thread Wan-Teh Chang
On Fri, May 14, 2010 at 11:18 PM, Nelson B Bolyard wrote: > > I looked through PSM for such a warning briefly.  I found a warning for > sites that use symmetric encryption of strength <= 90 bits, but I found > nothing that specifically looks at public key strength.  If I know the > exact text of t