Re: firefox 2 vs firefox 3 xpi signing

2008-10-14 Thread Nelson B Bolyard
will wrote, On 2008-10-13 16:34: Hi, We're working on a firefox extension and want it code signed. We signed up for a Versign authenticode cert and following this: http://oyoy.eu/huh/firefox-extension-code-signed-with-spc-pvk/ Oy! Oy! That's what I said when I read that page. Using GUIDs

SSL servers sending out multiple cert chains?

2008-10-14 Thread Nelson B Bolyard
Some time ago, in the last year, while the details of EV were getting worked out, I read a message from a representative of a CA whose root(s) are in Firefox. He wrote that to resolve certain issues with some browsers using new roots and other browsers using old roots, his CA was advising

Re: storing custom public key / private key pair securely in Firefox

2008-10-14 Thread Nelson B Bolyard
[EMAIL PROTECTED] wrote, On 2008-10-13 13:52: I have a crypto library which I connect to a Firefox extension using Xpcom. The library generates custom size public and private key pairs which I would like to store securely in Firefox. How would this be done? If I'm not mistaken, Firefox

Re: SSL servers sending out multiple cert chains?

2008-10-14 Thread Rob Stradling
On Tuesday 14 October 2008 08:03:04 Nelson B Bolyard wrote: Some time ago, in the last year, while the details of EV were getting worked out, I read a message from a representative of a CA whose root(s) are in Firefox. He wrote that to resolve certain issues with some browsers using new roots

RE: JSS version problem

2008-10-14 Thread David Stutzman
Fernando, Unless you specifically tell it not to, when you initialize JSS, it installs the JSS provider with the highest precedence. Since the JSS provider doesn't implement everything that the Sun providers do, that may be your problem. CryptoManager.initialize: 967 if(

Re: storing custom public key / private key pair securely in Firefox

2008-10-14 Thread Robert Relyea
Nelson B Bolyard wrote: [EMAIL PROTECTED] wrote, On 2008-10-13 13:52: I have a crypto library which I connect to a Firefox extension using Xpcom. The library generates custom size public and private key pairs which I would like to store securely in Firefox. How would this be done?

NSS implementation of TLS-PSK/ RFC 4279

2008-10-14 Thread jengler
I was wondering if implementation of TLS-PSK (RFC 4279) is currently in development. I do not see it in the current NSS source or roadmap. Thank you for any help. -John Engler ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org

Re: NSS implementation of TLS-PSK/ RFC 4279

2008-10-14 Thread Nelson B Bolyard
[EMAIL PROTECTED] wrote, On 2008-10-14 13:52 PDT: I was wondering if implementation of TLS-PSK (RFC 4279) is currently in development. I do not see it in the current NSS source or roadmap. Thank you for any help. -John Engler No. There are no plans to include any PSK cipher suites in NSS.

RE: Extracting RSA keys from internal database

2008-10-14 Thread David Stutzman
Anyway, I've tried dumping it to a file, this way: snip And after that, I tried managing it with openssl command line tools, but it doesn't seem to have a proper structure. ¿What are the contents of the string encprivkey-encryptedData.data? Is it a proper pkcs5 or pkcs8 or pkcs12 (when

Re: PK11Mode

2008-10-14 Thread marcelino esguerra jr
Glen Beasley wrote: On 10/13/08 07:00 PM, marcelino esguerra jr wrote: Good Morning! I'm Marcelino and I'm new in pkcs. i found this test tool from mozilla, the PK11Mode. I checkout them in cvs. However I am confused on how to run this. I would like to ask for instructions on this. Here