A couple of CRL import questions

2006-06-06 Thread Paul Neyman
Hi! You guys have been very helpful with my NSS questions :) Mind if I ask a couple more? 1. Is it possible to import a CRL during runtime? I.e: - a process has NSS initialized and is using NSS db. - a user then runs crlutil and imports a CRL (this has worked for me, btw). crlutil -L lists C

crlutil: stuck in infinite loop when creating a new crl

2006-06-01 Thread Paul Neyman
Hello! I've been trying to create a new CRL using crlutil, and it gets stuck in an infinite loop. I've traced it down to SECU_FindCrlIssuer function. Here's the excerpt from the code: while ( ! CERT_LIST_END(node, certList) ) { cert = node->cert; if (CERT_CheckCertUsage(ce

Re: Importing CRL using NSS API

2006-05-30 Thread Paul Neyman
Julien Pierre wrote: [EMAIL PROTECTED] wrote: Hi! I'm trying to import a CRL (in DER format) using NSS API. Since 3.4 API does not have an import function available, I took the source code from the crlutil and massaged it to fit into our application. NSS 3.4 did have import functions avai

Re: Importing CRL using NSS API

2006-05-30 Thread Paul Neyman
Hi Nelson, > Another use of "public" and "private" involves the intentions of the > software developers. In that sense, "public" means "the software developers > intended for other people (other software) to use this symbol" and > "private" means "the software developers intended for this symbo

Re: Importing CRL using NSS API

2006-05-30 Thread Paul Neyman
Hi, Nelson! Thanks for the quick reply. Let me clear up myself. Here's what's happening: You're using NSS 3.4? The current NSS is 3.11 . I am using NSS 3.11, the 3.4 I was referring to is from the list of public methods on Mozilla page (http://www.mozilla.org/projects/security/pki/nss/nss-3