NSS certificate DB concurrency

2010-10-25 Thread James Yonan
I'm trying to do a programmatic certificate import into Firefox 3.x using NSS_Initialize, PK11_GetInternalKeySlot, CERT_DecodeCertFromPackage, PK11_ImportCert, and CERT_ChangeCertTrust. I've seen various postings on this list in the past that seem to indicate that this is not safe due to the u

Re: how to modify the absolute profile path in secmod.db

2010-10-25 Thread al_9x
On 10/25/2010 2:26 PM, Robert Relyea wrote: On 10/23/2010 02:36 PM, al...@yahoo.com wrote: On 10/12/2010 4:38 PM, Robert Relyea wrote: On 10/08/2010 10:58 AM, al...@yahoo.com wrote: I noticed when moving a profile that secmod.db retains the old absolute profile path (configdir='...') Is the p

Re: how to modify the absolute profile path in secmod.db

2010-10-25 Thread Robert Relyea
On 10/23/2010 02:36 PM, al...@yahoo.com wrote: > On 10/12/2010 4:38 PM, Robert Relyea wrote: >> On 10/08/2010 10:58 AM, al...@yahoo.com wrote: >>> I noticed when moving a profile that secmod.db retains the old absolute >>> profile path (configdir='...') >>> >>> Is the path used for anything? >> Not

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-25 Thread Matej Kurpel
On 25. 10. 2010 12:16, Matej Kurpel wrote: On 24. 10. 2010 20:59, Nelson B Bolyard wrote: On 2010-10-24 02:12 PDT, Matej Kurpel wrote: [snip] You can clearly see both my CA and user certificates. Certutil has used my PKCS#11 module to obtain my user certificate. Then I launched the second comma

Re: JSS building error on Windows

2010-10-25 Thread Robert Relyea
> 9) cd jss../mozilla/security/jss > 10) make > > results: > > Makefile:49: ../coreconf/config.mk: No such file or directory > Makefile:69: ../coreconf/rules.mk: No such file or directory > make: *** No rule to make target '../coreconf/rules.mk'. Stop. > This seems a bit bizarre. I you built NS

Re: J-PAKE (was Re: Usage of FreeBL and FreeBL/mpi through JavaScript in Firefox 4 Sync)

2010-10-25 Thread Jean-Marc Desperrier
Brian Smith wrote: A balanced scheme is actually better for Sync because we are asking the user to read a code from the screen of device 1 and type it into device 2. Both devices need the same psssword/PIN. The augmented scheme of SRP can be degraded to a balanced scheme if you need. It's triv

Re: Usage of FreeBL and FreeBL/mpi through JavaScript in Firefox 4 Sync

2010-10-25 Thread Jean-Marc Desperrier
Brian Smith wrote: Nelson B Bolyard wrote: [...] I'm talking about putting JBAKE (or whatever it is) into the base product. [...] Is there something specific about J-PAKE that you think is bad or worse than some alternative? Are you objecting to J-PAKE because you do not trust the proof

Can not build JSS 4.3.1 package

2010-10-25 Thread Marcio
Hi, I got the error: No rule to make target while compiling the JSS 4.3.1 After I have built (make nss_build_all) the NSS 3.12.6 with NSPR 4.8.4 with successful and ran the tests (./all.sh) with successful too, when I run the make for JSS 4.3.1 I have found this error: Makefile: 49: ../coreconf/

Re: JSS4.DLL and JSS.jar for Windows 64 bits

2010-10-25 Thread Marcio
Hi Dave, Could you send me or publish the JSS.dll (4.3.1) compiled for Windows 64 bits. Could be with MSVS 2010. Thank you Ramirez, Marcio On 22 out, 10:00, wrote: > I would also be interested in the 64-bit 4.3.2 JSS.dll.  I have been having > problems building it on a 64-bit Windows XP sys

Re: Thunderbird: "Could not verify this certificate for unknown reasons"

2010-10-25 Thread Matej Kurpel
On 24. 10. 2010 20:59, Nelson B Bolyard wrote: On 2010-10-24 02:12 PDT, Matej Kurpel wrote: [snip] You can clearly see both my CA and user certificates. Certutil has used my PKCS#11 module to obtain my user certificate. Then I launched the second commany you were suggesting: certutil -d . -L -n