RE: SSL_AuthCertificate returning socket error!!!

I think the issue could be with initialization. As far as my understanding goes, mozilla does the NSS initialization stuff when it starts up. So it seems it is getting done twice. Try commenting out your initialization call. Also comment out NSS_Shutdown() call, if you are doing it. I would

Re: Terminating SSL on the web proxy

Bruce: You may want to look at Paros. Its an open source proxy where you can see the HTTPS traffic in plain text. Best Regards. Umesh. - Original Message - From: "Bruce Keats" <[EMAIL PROTECTED]> To: Sent: Monday, December 10, 2007 9:28 PM Subject: Re: Terminating SSL on the web pr

Locking reader lock

Hi all: I am having a problem in configuring a socket to do hand shake as server. I have a socket on which some communication has already taken place. When I try to upgrade the socket to SSL, the SSL_LOCK_READER(ss) in SSL_ResetHandshake throws an exception and everything is aborted. Basica

Re: stepping through NSS library code

Thanks Samrat. I was using Visual Studio .Net's debugger. But anyway I could debug it even with that by building the code with debug flag on and optimize flag off. Best Regards. Umesh. - Original Message - From: "samrat saha" <[EMAIL PROTECTED]> To: "Umes

stepping through NSS library code

Hi all: I want to step through the NSS library code. For example, I want to step through SSL_ResetHandshake in mozilla/security/nss/lib/ssl/sslsecur.c. I am not able to do so using the Visual Studio .Net 2003's debugger. I can step through other files but when I press F11 on SSL_ResetHandsh

Re: SSL in asynchronous proxy

Hi Nelson: Thanks for your reply. But my goal is a little different. I want to intercept requests from different clients (and not just the mozilla browser). So this compnent is a real proxy listening on some port for requests. As far as the design is concerned, it may not be a good thin

SSL in asynchronous proxy

Hi: I am trying to write a man-in-the-middle proxy as an extension to mozilla. This proxy is basically supposed to intercept HTTP/HTTPS requests, parse them and forward them to the appropriate server. To decipher HTTPS requests I need to do handshake as a server with the client. For this I

Re: SSL Client

I could solve it. SSL_OptionSet(socket, SSL_ENABLE_SSL3, PR_TRUE) does the trick. Best Regards. Umesh. - Original Message - From: "Umesh Bywar" <[EMAIL PROTECTED]> To: Cc: Sent: Tuesday, April 03, 2007 6:41 PM Subject: SSL Client > Hi all: > >

SSL Client

Hi all: I am trying to write an interceptor proxy as an extension to mozilla. It is something similar to webscarab or paros. I am facing a problem while browsing some HTTPS sites that use SSLv3 speciafically when I chain another proxy like squid with my own proxy. The reason for this is as

Re: My shy certificate

Not sure whether this will help, but I think you can write a function like the one given below. Have a look at security/manager/ssl/src/nsPKCS12Blob.cpp. nsresult nsPKCS12Blob::ImportSSLCertsFromFile(nsILocalFile *file) { nsNSSShutDownPreventionLock locker; nsresult rv; SECStatus srv = SECSucce

Re: NSS_Shutdown failure

Shutdown failure Umesh Bywar wrote: Hi all: Welcome to the list, Umesh. I am working on writing an xpcom component that checks which ciphers work with a given target. So basically, I have a component which acts as a SSL client and performs a handshake by setting a given cipher. I am execu

NSS_Shutdown failure

Hi all: I am working on writing an xpcom component that checks which ciphers work with a given target. So basically, I have a component which acts as a SSL client and performs a handshake by setting a given cipher. I am executing this in the context of the browser (and not as a independent