Re: NSS Apache module - mod_nss

2006-05-19 Thread Rob Crittenden
Nelson B. Bolyard wrote: Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips

Re: NSS Apache module - mod_nss

2006-05-19 Thread Peter Djalaliev
I am modifying mod_nss to implement TLS upgrades (RFC2817) to use in a special-purpose web client-server system. In fact, I think the modifications to mod_nss are done, but I am not yet done with implementing TLS upgrades in Firefox, so I haven't tested the mod_nss modifications. As we discussed

NSS Apache module - mod_nss

2006-05-18 Thread Rob Crittenden
A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true -dbdir /path/to/database), options to seed

Re: NSS Apache module - mod_nss

2006-05-18 Thread Nelson B. Bolyard
Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true -dbdir

Re: NSS Apache module - mod_nss

2006-05-18 Thread Wan-Teh Chang
Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true -dbdir

Re: NSS Apache module - mod_nss

2006-05-18 Thread Julien Pierre
Wan-Teh Chang wrote: Rob Crittenden wrote: A fair bit of work has been done to mod_nss, an SSL module for Apache that uses NSS instead of OpenSSL, since it was released last September. Changes since then include use the NSS OCSP client, addition of a FIPS mode (similar to modutil -fips true