Re: NSS Apache module - mod_nss

2006-05-23 Thread Julien Pierre
Peter Djalaliev wrote: I am modifying mod_nss to implement TLS upgrades (RFC2817) to use in a special-purpose web client-server system. We don't need to discuss the security issues of using RFC2817 on the Internet again. The last one on 3/31 - 4/07 went through them already. Would you mind

Re: NSS Apache module - mod_nss

2006-05-19 Thread Peter Djalaliev
I am modifying mod_nss to implement TLS upgrades (RFC2817) to use in a special-purpose web client-server system. In fact, I think the modifications to mod_nss are done, but I am not yet done with implementing TLS upgrades in Firefox, so I haven't tested the mod_nss modifications. As we discussed

Re: NSS Apache module - mod_nss

2006-05-19 Thread Rob Crittenden
Nelson B. Bolyard wrote: Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true

Re: NSS Apache module - mod_nss

2006-05-19 Thread Rob Crittenden
Wan-Teh Chang wrote: Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true -

Re: NSS Apache module - mod_nss

2006-05-18 Thread Julien Pierre
Wan-Teh Chang wrote: Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true

Re: NSS Apache module - mod_nss

2006-05-18 Thread Wan-Teh Chang
Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true -dbdir /path/to/databas

Re: NSS Apache module - mod_nss

2006-05-18 Thread Nelson B. Bolyard
Rob Crittenden wrote: > A fair bit of work has been done to mod_nss, an SSL module for Apache > that uses NSS instead of OpenSSL, since it was released last September. > > Changes since then include use the NSS OCSP client, addition of a FIPS > mode (similar to modutil -fips true -dbdir /path/to/d

NSS Apache module - mod_nss

2006-05-18 Thread Rob Crittenden
A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true -dbdir /path/to/database), options to seed th