Re: TLS-SRP (was Re: J-PAKE in NSS)

On Mon, 7 Mar 2011, Brian Smith wrote: But Curl, that supports secret keys from version 7.21.4, with GnuTLS only at the moment but is pushing hard to get in in Openssl also, apparently has simply given up about having TSP-SRP support when compiled with NSS. Can I just add that we (in the curl

TLS-SRP (was Re: J-PAKE in NSS)

Jean-Marc Desperrier wrote: > But Curl, that supports secret keys from version 7.21.4, with GnuTLS > only at the moment but is pushing hard to get in in Openssl also, > apparently has simply given up about having TSP-SRP support when > compiled with NSS. > > I see in an old doc that Johnathan was c

Re: J-PAKE in NSS

"Jean-Marc Desperrier" wrote: > Brian Smith wrote: > > The kind of improvement you described above will be made to resolve > > Bug 443386 and/or Bug 638966. > > I think Bug 638966 is slightly different, it's about permanently > storing the secret keys in the NSS db (I don't know if that's > really

Re: Known Issue? Looping CA Cross-Certificates not displayed as going to a Root CA

Ridley wrote: > Presence both of a pair of cross-certificates in the Authorities > certificarte store results looping rather than traversing to a root > certificate. See https://bugzilla.mozilla.org/show_bug.cgi?id=634074. - Brian -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org

Re: J-PAKE in NSS

Brian Smith wrote: "Jean-Marc Desperrier" wrote: [...] (I'd expect it instead to leave the AES256 key inside NSS and just get back the handle to it to encrypt what it needs later. [...]). > The kind of improvement you described above will be made to resolve > Bug 443386 and/or Bug 638966. I

Re: Root certificate authorities

On Mar 5, 1:22 pm, Nelson B Bolyard wrote: > Brian Smith wrote: > > "Ritmo2k" wrote: > >> Anyone know if its possible to configure Firefox to implicitly trust > >> all certificate authorities installed in the Windows Trusted Root > >> Certification Authorities Store? > > > Firefox does not support