Re: Removal of NSS and/or NSPR from the API exposed to addons

2012-01-18 Thread Benjamin Smedberg
On 1/18/2012 1:30 AM, Brian Smith wrote: they live in, and/or we may change the DLL we export those symbols from. This will be a very positive footprint win, because it means that the linker will be able to throw away the code for a lot of functions in NSPR and (especially) NSS that are unused

Re: 64bit NSS build on windows 7 x64

2010-09-16 Thread Benjamin Smedberg
On 9/16/10 6:28 AM, David Stutzman wrote: I start up the shell with the start-msvc8-x64.bat script, which doesn't seem to do/be anything different from start-msvc8.bat. The 64-bit compiler seems to be installed from the SDK. If possible I'd like to target from XP 64 on up as far as compatibilit

Re: Question about XMLHttpRequest in the non-Main thread

2009-09-18 Thread Benjamin Smedberg
On 9/18/09 12:18 PM, Viktor TARASOV wrote: > Hi, > > I'm desperately trying to get working the XMLHttpRequest in the non-main > thread of my XulRunner/XPCOM extension. > Please, is it possible at all? No. And this question should be asked in mozilla.dev.tech.dom. --BDS -- dev-tech-crypto mailin

Re: Allocator mismatches

2009-03-31 Thread Benjamin Smedberg
On 3/30/09 5:34 PM, Nelson B Bolyard wrote: > The problem is mixing DLLs that use standard VCRT with those that use > Mozilla's modified VCRT. > > As long as there are bugs in the browser of the sort that Neil has found, > developers of libraries upon which the browser depends, who develop with >

Re: Allocator mismatches

2009-03-30 Thread Benjamin Smedberg
On 3/30/09 4:00 AM, Nelson B Bolyard wrote: > On Windows, the JEMalloc code can ONLY be built with the non-free > "professional" version of Microsoft Visual Studio, and CANNOT be built > with the free version. Consequently, developers who use the free version > must build EVERYTHING themselves, a

Re: Return of i18n attacks with the help of wildcard certificates

2009-02-20 Thread Benjamin Smedberg
On 2/20/09 12:11 PM, Nelson B Bolyard wrote: > Benjamin Smedberg wrote, On 2009-02-19 07:39: > >> It sounds to me that we could and should fix this bug simply by disabling >> punycode for the wildcard portion. > > I'm not sure what you're proposing here, Ben, o

Re: Return of i18n attacks with the help of wildcard certificates

2009-02-19 Thread Benjamin Smedberg
On 2/19/09 9:37 AM, Eddy Nigg wrote: > On 02/19/2009 03:30 PM, Jean-Marc Desperrier: >> Moxie Marlinspike in Black Hat has just demonstrated a very serious i18n >> attack using a *.ijjk.cn certificate. >> >> http://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defea

Re: Suggestion: Announce date for MD5 signature deactivation

2009-01-09 Thread Benjamin Smedberg
On 1/9/09 4:25 PM, Johnathan Nightingale wrote: > On 9-Jan-09, at 1:27 PM, Benjamin Smedberg wrote: >> Perhaps it would help if we had some additional information such as: >> what is >> the maximum certificate expiration time? That is, if all CAs stopped >> using >>

Re: Suggestion: Announce date for MD5 signature deactivation

2009-01-09 Thread Benjamin Smedberg
On 1/9/09 12:51 PM, Johnathan Nightingale wrote: > - Do the work to arm ourselves so that when we are confident pulling > the trigger, we can actually do so with minimal changes (in case it > happens in a point release, for instance) > - Establish our feelings around how much of the net we are c

Re: Linking error for firefox extension - related to NSS?

2008-11-05 Thread Benjamin Smedberg
joshuaaa wrote: > I want to create an extension for firefox that is uses the > nsNSSCertificateDB and nsPKCS12Blob source files from firefox. This is not possible. These files (part of the PSM library) are linked to other parts of PSM and cannot be simply ripped out and linked into another locati

Re: Audit requirements for government CAs

2008-03-31 Thread Benjamin Smedberg
Frank Hecker wrote: > More importantly, there was strong resistance to the idea of moving away > from a universal root list. Some people pointed out that the localized > language versions didn't exactly map to particular countries, and that > many people in particular countries used the US Engl

Re: Proposal for improving the security of add-on updates

2007-06-19 Thread Benjamin Smedberg
Gervase Markham wrote: > This seems like the right solution to me. In fact, I had assumed it was > already the case, and that we were trying to solve the other half of the > problem. We already support hashes specified by the upate.rdf for the XPI, and AMO uses this to serve the XPIs over http. H

Re: CAs and country restrictions

2007-05-26 Thread Benjamin Smedberg
Paul Hoffman wrote: > - Without seeing the audit, we have no idea whether the security used by > the agency would pass muster for the identities being bound. This means > that the standards we hold VeriSign to for certificates whose identities > are in .kr different than the standards we hold KISA

Re: Runtime errors linking against NSS

2006-07-22 Thread Benjamin Smedberg
Nelson B wrote: Benjamin Smedberg wrote: I have been trying to use GCC trunk to build Firefox trunk sources and the build works fine. What I am having problems with is when I try to run Firefox, I get the following errors: ./firefox-bin: /usr/lib64/libnss3.so: version `NSS_3.11.1' not

Runtime errors linking against NSS

2006-07-21 Thread Benjamin Smedberg
I have been trying to use GCC trunk to build Firefox trunk sources and the build works fine. What I am having problems with is when I try to run Firefox, I get the following errors: ./firefox-bin: /usr/lib64/libnss3.so: version `NSS_3.11.1' not found (required by ./libxul.so) ./firefox-bin: /u