Re: how to deploy a customized Firefox + root certs

Nelson B wrote: > Wei Shao wrote: > > > I have done a customized Firefox browser for a research project. I am > > hoping to post the report of this project to this group soon. > > > > Two questions, > > > > 1. If I want to provide my customized Firef

how to deploy a customized Firefox + root certs

Hi, I have done a customized Firefox browser for a research project. I am hoping to post the report of this project to this group soon. Two questions, 1. If I want to provide my customized Firefox for people to download and try, how shall I do that? Right now, I have the dist/bin Folder on my lo

NSS lib for Firefox 2

What NSS lib version does Firefox 2 use? I could not find any docs on security specific features for Firefox 2. e.g, is ECC , server name indication in Firefox 2? Thanks, Wei ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://l

certutil -e option does not work

>From the documentation, certutil with -e option will check a certificate's signature during the cert validation. But it is not working. I have a cert with corrupted signature but the validation passed. Wei ___ dev-tech-crypto mailing list dev-tech-cr

certuil -V (verify) failure and self-signed CA cert

Hi, I used a self-signed CA to sign another user certificate. Then I run certutil -V for verification of the signed cert. I get this error, "certificate is invalid: Peer's certificate has been marked as not trusted by the user." This may be by design. But is there anyway to let me pass without

Re: SEC_ASN1Template and OPTIONAL/ANY

Thanks for the detailed info! Weidong Nelson B wrote: > Wei Shao wrote: > > > can someone explain how the ASN1 template works in general, > > http://www.google.com/search?hl=en&q=asn.1+template+site%3Amozilla.org > will show you the available documentation on NSS

Re: HASH_* and Sign APIs

Wan-Teh Chang wrote: > [EMAIL PROTECTED] wrote: > > Hi, > > > > HASH_* APIs provide a good wrapper for the hashing algorithms. > > But secsign.c does not use any of these. It instead calls > > create/update/end directly on the hash context. > > > > Would it be better to use HASH_* APIs in secsign.

Prepare SECItem for DER_Encode()

Hi, if I need to populate a OCTET_STRING for DER encoding, how shall I prepare the SECItem structure? I need to call this method, SECStatus DER_Encode(PRArenaPool *arena, SECItem *dest, DERTemplate *dtemplate, void *src) where src is a pointer to SECItem structure. How shall I prepare the dat

SEC_ASN1Template and OPTIONAL/ANY

Hi, can someone explain how the ASN1 template works in general, and in particular, if the template definition for the field is SEC_ASN1_OPTIONAL | SEC_ASN1_ANY In this case, if I want to put a SEC_ASN1_OCTET_STRING data to the filed, will the encoding/decoding work? or do I need to change the te

Re: failed to add a new API in cryptohi (in my local client)

Julien Pierre wrote: > Wei Shao wrote: > > > In my local set up, I have added a new method in cryptohi.h and > > implement it in secsign.c. > > The compilation is okay. But I try to use it in certutil/certutil.c and > > got an undefined symbol linking error f

failed to add a new API in cryptohi (in my local client)

Hi, In my local set up, I have added a new method in cryptohi.h and implement it in secsign.c. The compilation is okay. But I try to use it in certutil/certutil.c and got an undefined symbol linking error for my added API. Same error if after I make clean first. I noticed the public .h file unde