Re: sslconn.c in NSS_3_1_1_RTM

2000-12-05 Thread Wan-Teh Chang
Javier Pedemonte wrote: I just got NSS_3_1_1_RTM from cvs to see if it fixes any outstanding problems on my end. While it does include the fix to mpprime.c, I noticed that sslconn.c was still at version 1.5. When I manually upgraded to version 1.9 of that file, the performance on the psm

NSS 3.1.1 source code tar files will be pushed to ftp.mozilla.org

2000-12-13 Thread Wan-Teh Chang
On Friday morning, I am going to push the NSS 3.1.1 source code tar files to ftp.mozilla.org. Two tar files will be pushed. One contains not only NSS 3.1.1 but also NSPR 4.1 and DBM, which are required by NSS. The other contains NSS 3.1.1 only. Wan-Teh

Re: PSM for Solaris?

2001-01-03 Thread Wan-Teh Chang
Brandon Hume - BORG Redirect wrote: Wan-Teh Chang [EMAIL PROTECTED] wrote: gmake -f client.mk build gmake -f client.mk build BUILD_MODULES=psm I guess you just need to reverse the last two steps, that is, build PSM before building Mozilla. Thank you, that got me much further

Re: Anyone knows how to convert a ssl socket pointer to a socket handle

2001-01-04 Thread Wan-Teh Chang
kai lei wrote: I need to convert a ssl socket handle to a socket handle.Can anyone help me? Why do you need to do this?

Re: Build Mozilla NSS 3.1.1 on Win2k

2001-01-04 Thread Wan-Teh Chang
Ming Zhou wrote: Goal: Build NSS 3.1.1 (Network Security Services) Platform: Win2K Pro with MSDOS shell, gmake, MSVC lib When building NSS following build instructions of both Mozilla and NSS, I got the following error: lib -NOLOGO -OUT:"WIN954.0_OPT.OBJ/secutil.lib"

[ANNOUNCE] NSS 3.2 Beta 3

2001-01-29 Thread Wan-Teh Chang
This is to announce the NSS 3.2 Beta 3 release. The release notes are available at http://www.mozilla.org/projects/security/pki/nss/release_notes_32.html. This is a beta release that we recommend for public testing. The cvs tag is NSS_3_2_BETA3. Products other than JSS and PSM should use the

Re: psmmain.c and main.cpp

2001-02-07 Thread Wan-Teh Chang
Javier Delgadillo wrote: psm links in some C++ libraries (xpcom and what not). Some UNIX flavors require that programs linking in C++ libraries have a main function in a C++ source file. This is in fact required by the C++ language. The main() function of a C++ program must be in a C++

[ANNOUNCE] NSS 3.2 Release

2001-02-16 Thread Wan-Teh Chang
I am pleased to announce the NSS 3.2 release. This is the first time NSS is available as shared libraries, which will make it significantly easier for us to deliver bug fixes and performance enhancements to our customers. We also incorporated new assembler code we received from Sun and HP that

Re: nss build

2001-02-19 Thread Wan-Teh Chang
shankar srinivasan wrote: Can i find a compiled version of NSS lib somewhere? Am having a hard time building it under windows. We plan to provide binary distributions of NSS 3.2 for Windows, Solaris 2.6, Solaris 8 64-bit, HP-UX 11.00 (32-bit and 64-bit), AIX (32-bit and 64-bit), Red Hat

Re: support of PR_ImportTCPSocket

2001-05-07 Thread Wan-Teh Chang
Simon Josefsson wrote: Any chance of making PR_ImportTCPSocket() into a official function? No. Although PR_ImportTCPSocket() works in most cases, it cannot be made to work in general. I think it's quite useful if you're trying to use NSS to SSL-ify a program that does not already use

Re: failure building NSS on WINNT

2001-05-08 Thread Wan-Teh Chang
jasper chow wrote: In order to make the life simpler, can I download a copy of nss.dll(nss.lib?) somewhere in mozilla.org? I tried http://mozilla.org/projects/seamonkey/release-notes/ but nss related libraries are not there Yes, we do have NSS binary releases on mozilla.org. We don't have

Re: object directory for NSS

2001-05-09 Thread Wan-Teh Chang
Shin'ichiro TAYA wrote: I'm trying to build psm2 on NetBSD-current(1.5U). NSS makes library at NetBSD1.5U_DBG.OBJ, but psm2 searches NSS libs at NetBSD1.5U_x86_DBG.OBJ, so failes to make psm2. I think there are two solutions: (a) make NSS libs at NetBSD1.5U_x86_DBG.OBJ (b) refer NSS libs

Re: mozilla 0.9 for x86 Solaris 2.8

2001-05-17 Thread Wan-Teh Chang
Kriton Kyrimis wrote: snip The program seems to run under x86 Solaris 2.7, as well. Building PSM was a bit of a pain, as I had to do a few things by hand to make it compile: * Set the NS_USE_GCC and NO_MDUPDATE environment variables by hand. The first one was required to

Re: problems building PSM2 on solaris sparc (PURIFY issues ?)

2001-05-17 Thread Wan-Teh Chang
Rob Somerville wrote: gmake cannot find ../../dist/SunOS5.7_OPT.OBJ/lib/libfreebl_pure32_3.so , i have not been able to build PSM2 for several days Monday May 14 15:16:59 MDT 2001 gmake[3]: Leaving directory `/home/red1/data/mozilla/security/nss/lib' ../../config/nsinstall -R -m 755

NSS 3.2.1 binary distributions will be available.

2001-05-31 Thread Wan-Teh Chang
Tomorrow (Friday, June 1) we will make NSS 3.2.1 binary distributions available. Please watch this newsgroup for the announcement. Wan-Teh

Re: Building on Solaris

2001-06-02 Thread Wan-Teh Chang
Lars Hecking wrote: It seems that Rob and I have been able to successfully build the lizard with PSM2 support for at least the past few days, even though we seem to differ in which -O options work :) However, I have run into two non-fatal configure problems. Maybe someone can help

Re: solaris SUNSOFT CC questions:

2001-06-02 Thread Wan-Teh Chang
Rob Somerville wrote: what are the best configuration options to use with Workshop 5.0/6.0. It is best to ask Sun's Mozilla client porting team. You should be able to find their email addresses in Bugzilla. Wan-Teh

Re: NSS 3.2 Build error under Winnt

2001-06-03 Thread Wan-Teh Chang
Mark F Moser wrote: Hi All, I have followed the extract instructions given in http://www.mozilla.org/projects/security/pki/jss/jss_build.html and checked out NSS 3.2. OK, I see what happens. JSS 3.0 build instructions point to NSS 3.2 build instructions. When we changed the NSS build

[ANNOUNCE] NSS 3.2.1 binary distributions

2001-06-04 Thread Wan-Teh Chang
This is to announce that NSS 3.2.1 binary distributions are now available for anonymous ftp download at ftp://ftp.mozilla.org/pub/security/nss/releases/NSS_3_2_1_RTM/. Header files and pre-built binaries (both debug and optimized builds) for several platforms are provided. NSS requires NSPR. We

Bug 83845 and bug 83930

2001-06-04 Thread Wan-Teh Chang
This past weekend we found two bugs in NSPR. Bug 83845 affects code using NSPR's IPv6 socket interface on an IPv4 host. PR_GetPeerName method incorrectly returns the information of the local socket (as opposed to the peer) if invoked on a PR_AF_INET6 socket emulated on top of IPv4. This bug

Re: Need OS/2 and OSX support for new SSL server code

2001-06-06 Thread Wan-Teh Chang
Colin Blake wrote: Does this have anything to do with Mozilla? Because process-shared unnamed semaphores and OpenVMS don't mix! Mozilla does not use the the SSL server session cache code in NSS, but Mozilla is not the only user of NSS. I know just porting Mozilla to OpenVMS is enough to

Re: Closing SSLServerSocket which is waiting for a new connection

2001-06-25 Thread Wan-Teh Chang
Nelson B. Bolyard wrote: Jung-Ho Ahn wrote: Hello, While I am trying to use NSS (actually JSS) in our HTTP server, I found that I could not a server socket which is waiting for a new connection, since a socket is locked during the 'accept' call. Is there any way to close that

Re: NSS Blocking Vs Non Blocking sockets

2001-07-26 Thread Wan-Teh Chang
Kannan Bhoopaathy wrote: Hello, I have a question related to NSS. In the sample client/server example that is distributed with NSS, all the sockets created are explicitly set as blocking sockets? Is there a reason why it is done like that? Is this because NSS supports only blocking

Re: Problems with Modutil

2001-08-09 Thread Wan-Teh Chang
Carlos Cid wrote: On HP-UX I have a different problem with modutil, as when I run the version that comes with iWS (again both 4.1 SP7 and 6.0), it returns : /usr/lib/dld.sl : Can't open shared library: ../../../dist/HP-UXB.11.00_OPT.OBJ/lib/libnspr3.sl /usr/lib/dld.sl : No such file

Re: Problems with Modutil

2001-08-09 Thread Wan-Teh Chang
Carlos Cid wrote: Hi, I have seen it. But unfortunately its 'modutil' is dynamically linked to a couple of libraries included in NSS. Thus my problem still remains (I need the whole NSS installed in order to use modutil). Something like the ones in Cpkg 1.06 would solve my problem (stand

NSS 3.4 Project Plan

2001-09-11 Thread Wan-Teh Chang
Attached is the draft of the NSS 3.4 project plan. We may make minor changes to it this week, but it is ready for a final review. Your comments are welcome. Wan-Teh Title: NSS 3.4 Plan NSS 3.4 Plan Newsgroup: netscape.public.mozilla.crypto Draft Version 0.8, 10 September 2001

Re: NSS 3.4 Project Plan

2001-09-11 Thread Wan-Teh Chang
The NSS 3.4 project plan is also available on our web site at http://www.mozilla.org/projects/security/pki/nss/nss-3.4/nss-3.4-plan.html. Wan-Teh

Re: S/MIME and jss

2001-09-11 Thread Wan-Teh Chang
Moritz Walther wrote: Hi, has anybody examples for using JSS/NSS for S/MIME ? JSS doesn't expose the S/MIME functions in NSS now. The best example of using NSS for S/MIME is the 'cmsutil' command-line utility in NSS. Its sources are in mozilla/security/nss/cmd/smimetools. Some people at

Re: Statically linked NSS tools

2001-09-11 Thread Wan-Teh Chang
Jamil Nimeh wrote: I seem to recall a long time ago that things like certutil, keyutil, modutil, etc. were statically linked binaries. Does anyone know if there's a way to build these utilities from NSS 3.3 or 3.2 statically linked with all the NSPR and NSS libs? Linking the NSS utilities

Re: NSS 3.4 Project Plan

2001-09-15 Thread Wan-Teh Chang
Ben Bucksch wrote: Wan-Teh Chang wrote: 1. S/MIME v3. Netscape 6.x will support S/MIME soon. Our S/MIME code needs more code review, testing, enhancement, and documentation. It needs to interoperate with Netscape Communicator, Microsoft Outlook, and Netscape 6

Re: PR_IO_TIMEOUT_ERROR when doing a PR_Send with PR_INTERVAL_NO_TIMEOUT???

2001-10-22 Thread Wan-Teh Chang
Mike Oliver wrote: I apologize, but I actually mis-typed. I'm using BLOCKING sockets over an SSL connection... Does this make any sense now? It's still a bug for PR_Send() with PR_IO_NO_TIMEOUT on blocking sockets to fail with the PR_IO_TIMEOUT_ERROR error. Wan-Teh

Re: PR_Cleanup hangs

2001-10-23 Thread Wan-Teh Chang
Mike Oliver wrote: After closing a SSL blocking socket and preparing to shutdown, I call: NSS_Shutdown(); PR_Cleanup(); PR_Cleanup, however, never returns. Any thoughts? Running on Win2K. It would be nice to use the debugger to see where PR_Cleanup is waiting. I suspect that it is

Re: PR_Cleanup hangs

2001-10-23 Thread Wan-Teh Chang
Mike Oliver wrote: I have two other threads running, but I did not create them using NSPR, but rather as Win32 ::CreateThread calls. Could this be causing the problem? Any other thoughts? Would you recommend that I download all the source and step into PR_Cleanup w/ the debugger? If those

Re: logging in nss?

2001-10-24 Thread Wan-Teh Chang
Jasen Halmes wrote: Is there any facility built into nss where I could add some code to an nss function and read output in some sort of a log? Since I am running from an appserver I am trying to think of ways to get some more dubug info, I'm not sure what a printf would do in this

Re: Building JSS library under Windows NT problem

2001-11-02 Thread Wan-Teh Chang
Nelson B. Bolyard wrote: Jamie Nicolson wrote: I think the makefiles will only work in environments that silently convert slash to backslash--this probably means you need a UNIX emulation package such as cygwin or MKS. AFAIK, MKS does not ever silently convert slash to backslash. This

Re: jss-3.1.1 on sparc 8

2001-11-14 Thread Wan-Teh Chang
Steven T. Hatton wrote: when I try to run the SSLClient.class found in the sample code found on mozilla.org I get: /***/ Exception in thread main java.lang.UnsatisfiedLinkError: Unable to load jss library or one of its dependencies at

Re: PR_ImportTCPSocket() causing plaintext writes and HUPs with NSS

2001-10-09 Thread Wan-Teh Chang
Nelson B. Bolyard wrote: Alex Graveley wrote: SSL_ForceHandshake following SSL_ResetHandshake fails with -8179. Did you look and see what that error number is? SEC_ERROR_UNKNOWN_ISSUER http://lxr.mozilla.org/mozilla/source/security/nss/lib/util/secerr.h#59 It seems that the SSL

Re: PR_Poll vs. PR_Available vs. SSL_DataPending

2001-10-16 Thread Wan-Teh Chang
Mike Oliver wrote: Make your sockets nonblocking. It is the only way to make sure that PR_Read() doesn't block. That doesn't make sense to me. With blocking sockets, you still should be able to query the socket first for data before doing the actual blocking read This is true for a

Re: PR_Poll vs. PR_Available vs. SSL_DataPending

2001-10-16 Thread Wan-Teh Chang
John Gardiner Myers wrote: Mike Oliver wrote: One last question: What's the difference between PR_Read/PR_Write and PR_Recv/PR_Send when working w/ a socket? PR_Recv/PR_Send take more arguments. Other than that, no difference. That's right. Another difference is that PR_Recv/PR_Send

Re: PR_Poll vs. PR_Available vs. SSL_DataPending

2001-10-16 Thread Wan-Teh Chang
John Gardiner Myers wrote: Mike Oliver wrote: That doesn't make sense to me. With blocking sockets, you still should be able to query the socket first for data before doing the actual blocking read That is not the case. If you don't want to block, make the socket nonblocking. I don't

Re: PR_Poll vs. PR_Available vs. SSL_DataPending

2001-10-17 Thread Wan-Teh Chang
Mike Oliver wrote: Okay - I think we're near the finish line here. I'm beginning to understand. Thanks for your help John and Wan-Teh. Just a couple of last questions: - If I use blocking sockets - I can spawn another thread to handle the PR_Read, which will block. The problem is that

Re: How do JSSE and JSS compare?

2001-12-04 Thread Wan-Teh Chang
Steven T. Hatton wrote: I'm curious about the relationship between JSSE and JSS. Some of the questions I have are the following: Can I use JSS as a cryptographic provider for JSSE? You will be able to do that in a future JSS release. Turning JSS into a JSSE provider is one of the goals

Re: About NSS and PKCS#11 + SSL_ForceHandshake

2001-12-12 Thread Wan-Teh Chang
Nelson B. Bolyard wrote: Read The Fabuluous Manual! :) Can't resist.

Re: Decoding an enveloped messages causes a crash in NSS 3.3.2.

2001-12-17 Thread Wan-Teh Chang
Ian McGreer wrote: I believe this is http://bugzilla.mozilla.org/show_bug.cgi?id=102543 I would recommend trying NSS 3.3.2 and seeing if it works. Let us know if it does and we'll mark the bug as a dup. You are right, Ian. Daniel verified that this bug is a duplicate of 102543.

Re: About server sockets and keeping control of port number

2001-12-17 Thread Wan-Teh Chang
Patrick wrote: Is there a way to find an unused local port for when I create a client socket, or is trial and error? This is done by the OS. You don't need to bind a client socket. Wan-Teh

Re: About server sockets and keeping control of port number

2001-12-18 Thread Wan-Teh Chang
Victor Probo wrote: Looking at Comer's or Stevens' basic introductions to networking define the following. There is a data structure (socket) for each connection, as well as the listening connections, and those in the shutdown process. A connection is identified by: local IP

Re: About server sockets and keeping control of port number

2001-12-18 Thread Wan-Teh Chang
Patrick wrote: Well, one can certainly pick which local port to bind to. In JSS for example, there are a few SSLSocket constructors that allow a localPort to be specified (See http://www.mozilla.org/projects/security/pki/jss/javadoc/org/mozilla/jss/ssl /SSLSocket.html#constructor_summary)

Re: NSS/JSS support for WPKI WTLS certificates

2001-12-21 Thread Wan-Teh Chang
Swaminathan Seetharaman wrote: Hi, Are there any plans to support WPKI and WTLS certificates in the near future. No. Just to make sure I understand the scope of your question, you only need support for WTLS *certificates*, not the WTLS protocol, correct? Wan-Teh

Re: S/MIME stability with current (12/23) nightlies

2001-12-27 Thread Wan-Teh Chang
Mark Shuttleworth wrote: Am seeing constant crashes in mailnews when I receive signed and/or encrypted email. It's great that S/MIME is now there in first-cut mode, but I'm surprised that it seems so much less robust than Nav 4.x. Is it using all-new backend code, or is it still using the

Re: db directory change

2001-12-28 Thread Wan-Teh Chang
tak wrote: Hi! I'm trying make application which provide digital signature function use by NSS. I can not change db directory while application is running although I changed first parameter of NSS_Initialize(). You mean your application is calling NSS_Initialize() multiple times,

Re: newbie question on https

2002-01-02 Thread Wan-Teh Chang
WHLZ wrote: Hi, I am new in playing Mozilla. I downloaded the tar ball and compiled it. But when I ran it, I can't visit sites that requires https. From Wan-Teh Chang's instruction page on NSS, it seems I need to compile NSS into Mozilla. But the problem is I don't have BSAFE Crystal-C

Re: S/MIME stability with current (12/23) nightlies

2002-01-02 Thread Wan-Teh Chang
Mark Shuttleworth wrote: Which is the correct Mozilla component in bugzilla for bugreports about S/MIME? NSS? Or MailNews? Good question, and the answer is not obvious, unfortunately. In general, you should file S/MIME bugs against MailNews or PSM. (I don't know which product is more

Re: clientAuthCertificate callback

2002-01-07 Thread Wan-Teh Chang
Patrick wrote: I want to return to my user running my client app, an error string that is generated in my clientAuthCertificate NSS callback function (SSL_AuthCertificateHook): after the first write on the SSL socket, my client app gets the server cert and performs checks on the server cert

Re: TLS ciphers in NSS vs JSS

2002-01-08 Thread Wan-Teh Chang
Wan-Teh Chang wrote: Patrick wrote: Hello, I noticed JSS lists 5 TLS ciphers versus NSS listing 2. Why does NSS not list as many? Does it support all 5 and the docs are not up to date? Are you referring to the list here? http://www.mozilla.org/projects/security/pki/nss/ref/ssl

Re: NSS Windows 32 support

2002-01-09 Thread Wan-Teh Chang
Kenneth R. Robinette wrote: Has anyone used NSS-3.3 on Windows, compiled into dll's and used by several different clients concurrently? This should work if the different clients don't share the NSS config directory or database files. Also, has anyone tried the latest code on Windows 98?

Re: NSS Windows 32 support

2002-01-10 Thread Wan-Teh Chang
Kenneth R. Robinette wrote: I don't understand the answer. That implies that no third party application can make use of the certificates/keys contained within the Netscape/Mozilla standard databases. A third party application just needs to create its own NSS config directory. NSS will

Re: NSS on Windows 98

2002-01-24 Thread Wan-Teh Chang
Tak wrote: Hi. I developed plug-in which list certificates using NSS. I have developed the plug-in on Windows2000 SP1. I used static library. The plug-in ran properly on Windows2000 SP1. However, when the plug-in ran on Window98SE, application error occurred. In order to run the

Re: Certutil Object Signing Confusions (maybe a bug too)

2002-01-30 Thread Wan-Teh Chang
Eric Murphy wrote: How recent has this autoconf changeover happened? I have not built Moz on Windows in over a year, so I am very rusty. NSPR 4.1.2 does not use autoconf. I don't know why the build instructions don't work for you. Wan-Teh

Re: How to use NSS?

2002-02-07 Thread Wan-Teh Chang
D wrote: I managed to build NSS, found that SMimeTools and CertUtil has the functionalities I'm looking for, but the problem is there's no documentation or roadmap for using the APIs (would appreciate for any pointers on getting documentation if you know of any). Start from here

Re: What exactly is in libfreebl_hybrid_3.so and libfreebl_pure32_3.so?

2002-02-21 Thread Wan-Teh Chang
Patrick wrote: What exactly is in libfreebl_hybrid_3.so and libfreebl_pure32_3.so? Is that Netscape's implementation of the RSA algorithm? Is that an option still? libfreebl_pure32_3.so works on all versions of the SPARC processors. libfreebl_hybrid_3.so only works on UltraSPARC

Re: Supported Functions

2002-02-21 Thread Wan-Teh Chang
Kenneth R. Robinette wrote: Wan-Teh After reading your note and thinking about it, I went back and compiled our application using only dll linkage. All went well except for one function, CERT_DecodeDERCertificate(). This is a rather common function required by many things, including the

Re: Supported Functions

2002-02-22 Thread Wan-Teh Chang
Ian McGreer wrote: They have be renamed with a prepended __ to indicate something like, this function is exported now but may not be in the future. It's actually stronger than that. These functions are exported by nss3.dll only for the other two NSS DLLs, ssl3.dll and smime3.dll. They

Re: Problem with SmartCard Integration

2002-02-26 Thread Wan-Teh Chang
[EMAIL PROTECTED] wrote: I have a problem with the newest nightly builds and my smart card. With version .98 all the certificates were visible and usable. But now none of them is there. Does somebody know what has changed? On Feb. 6 we changed the version of NSS (the crypto libraries) in

Re: How to add SSL support when compile mozilla 0.9?

2002-02-26 Thread Wan-Teh Chang
jacky wrote: 1.is the mozilla version too old to use NSS? 2.who can tell me the detailed steps for compile SSL supported mozilla? I suggest you download the latest Mozilla milestone release from http://www.mozilla.org/releases/. The current milestone is Mozilla 0.9.8 and Mozilla 0.9.9

Re: Supported Functions

2002-02-26 Thread Wan-Teh Chang
Patrick wrote: One should be able to edit the nss.def file to had critical functions not yet exported, and be able to rebuild NSS just fine, correct? Yes. Since NSS is open source software, you are free to modify it to suit your purposes. I just wanted to point out the caveat that the NSS

Re: JSS

2002-02-26 Thread Wan-Teh Chang
Krishnan Chellakarai wrote: Hi, I wanted to use the certificates/keys from the Netscape Repository (cert7.db key3.db) to do digital signatures of our HTML form data. So, I was looking at JSS and have few questions like 1) Can I use JSS and the standard PKCS11 interface provided by JSS?

Re: using PSM in an own (Windows) build

2002-02-27 Thread Wan-Teh Chang
Frank Schönheit wrote: Hi all, do not know if I'm at the right place here, if not, please somebody point me into the right direction. My problem is that I'm unable to get PSM working with an own mozilla build. Though I successfully built the PSM, and the files named in

Re: using PSM in an own (Windows) build

2002-02-28 Thread Wan-Teh Chang
Frank Schönheit wrote: Hi Wan-Teh, The PSM build instructions document you cited above is the right one. All the prerequisites should be documented there. But this doc it's somewhat ... thin. It just says do this for building and find the outcoming libs there. I successfully built,

Re: using PSM in an own (Windows) build

2002-02-28 Thread Wan-Teh Chang
Frank Schönheit wrote: Hi, got it . A call to regxpcom.exe solved the problem (the component.reg increased in size with this - I assume the PSM libs are registered now). Isn't the build supposed to do a regxpcom automatically? But ok, I'm in the wrong group with this question

Re: Building NSS331 on HP-UX11.0

2002-03-04 Thread Wan-Teh Chang
Patrick wrote: I'm having ahard time building NSS on HP11: First, I had to modify /coreconf/HP-UXmk to say CC=gcc instead of CC=cc to get the build system to start using gcc The correct solution is to set the environment variable NS_USE_GCC to 1 Wan-Teh

Re: Building NSS331 on HP-UX11.0

2002-03-04 Thread Wan-Teh Chang
Patrick wrote: It *looks like* the build scripts are broken when using gcc as the compiler??? At least on HP11 We do support gcc on some platforms On HP-UX we only support the HP C compilers Wan-Teh

Re: About Root CAS being loaded form PKCS#11

2002-03-04 Thread Wan-Teh Chang
Robert Relyea wrote: Patrick wrote: Hello, I was reading http://wwwmozillaorg/projects/security/pki/nss/loadable_certshtml and the sample code for installing the module questions about this: 1 Shouldn't it read: if (hasroot == PR_FALSE) { dll_path =

Re: Building NSS331 on HP-UX11.0

2002-03-04 Thread Wan-Teh Chang
Patrick wrote: OK so I should stay away from gcc when compiling NSS on HP11? You can certainly use gcc to compile NSS on HP-UX 11 It's just that you will need to do the porting work The +Z and *s problems that you mentioned are both porting problems The compilers and platforms that the NSS

Re: Building NSS331 on HP-UX11.0

2002-03-05 Thread Wan-Teh Chang
Patrick wrote: I can't tell what cc compiler I have on my HP11 machine; It resides in /usr/bin but can't get a version number (--version does not work) It looks like it came with the OS (HP-UX faraday B1100 A 9000/785), judging from messages I get when I tried to build NSS with it:

Re: Where do I get NSS_3_3_2_RTM?

2002-03-05 Thread Wan-Teh Chang
Maggot wrote: I can't seem to find ftp://ftpmozillaorg/pub/security/nss/releases/NSS_3_3_2_RTM/ Can someone tell me where to get the NSS 332 release binaries? Sorry We haven't pushed the NSS 332 binary releases to the ftp site I have asked our release engineer to do that I will post an

Re: softokn3.dll missing from NSS_3_4_BETA2

2002-03-07 Thread Wan-Teh Chang
Maggot wrote: Can't seem to find the softokn3.dll in any of the WINNT or WIN95 archives in http://ftp.mozilla.org/pub/security/nss/releases/NSS_3_4_BETA2/ You are right. Our release script was not updated to include the new softokn3.dll. We will fix this in the next NSS 3.2 pre-release.

Re: struct CERTCertDBHandleStr missing in NSS 3.3.x?

2002-03-08 Thread Wan-Teh Chang
Jim wrote: I'm trying to recompile my source code with the latest release version of NSS 3.3.2 and NSPR 4.1.2. Jim, If you are upgrading from the old NSS 2.8.x release, you will need to change your makefiles to link with the new NSS shared libraries and change your source files if you are

Re: Checksum error when untarring NSS source

2002-03-08 Thread Wan-Teh Chang
Patrick wrote: I experienced a weird thing when untarring NSS331 source pulled from mozilla ftp site. On Solaris, I got a directory checksum error. But on HPUX11, the tar completed but left an ascii text, along with the nss-3.3.1 dir tree: the file name is LongLink and contains this line:

Re: GMAKE has problems building NSS on Windows

2002-03-13 Thread Wan-Teh Chang
Patrick wrote: I'm using gmake to build NSS on Windows but it looks like the build script were not tested with gmake? There are at least three versions of gmake on Windows. 1. Netscape's port of GNU make 3.74 to Win32. 2. GNU make, stand-alone. 3. GNU make, as part of Cygwin. We need to

Re: SEC_ASN1EncodeItem

2002-03-15 Thread Wan-Teh Chang
Nelson B. Bolyard wrote: Patrick wrote: Why didn't I see this problem in NSS3.1? I'd guess you were tesing only on Unix? It's because NSS 3.1 does not have DLLs. Wan-Teh

[ANNOUNCE] NSS 3.4 Release Candidate 1

2002-03-20 Thread Wan-Teh Chang
binary distributions. We may produce another release candidate if we find serious problems that require nontrivial fixes during our testing. Please help us test this release candidate and report any bugs you find in Bugzilla. Thank you. Wan-Teh Chang

[ANNOUNCE] NSS 3.4 Release Candidate 1

2002-03-21 Thread Wan-Teh Chang
binary distributions. We may produce another release candidate if we find serious problems that require nontrivial fixes during our testing. Please help us test this release candidate and report any bugs you find in Bugzilla. Thank you. Wan-Teh Chang

Re: File not found error, nss_3_4_RC1 making this

2002-03-21 Thread Wan-Teh Chang
Mark Strong wrote: I must be missing something. Get this when compiling make[3]: Entering directory `/home/mstrong/z/nss-3.4.rc1/mozilla/security/nss/lib/util' gcc -o Linux2.2_x86_glibc_PTH_DBG.OBJ/secdig.o -c -g -fPIC -DLINUX1_2 -Di386 -D_XOPEN_SOURCE -DLINUX2_1 -ansi -Wall -pipe

Re: WSOCK32.DLL on Windows 95?

2002-03-25 Thread Wan-Teh Chang
Meadows, Tyron wrote: I've compiled two versions of a program to run in Windows 95/98 and Windows NT/2000 environments by assigning the values WIN95 and WINNT respectively to the OS_TARGET environment variable. The WINNT program works as expected on computers running Windows 98, NT, and

Re: PKCS#11 module loading problem in Mozila 0.9.9?

2002-03-27 Thread Wan-Teh Chang
Naomaru Itoi wrote: Thanks for your help, I guess I know what my problem is, now; the browser's in CFM, but my PKCS#11 module was in Mach-O. So: I downloaded MPW and compiled the PKCS#11 code with it. I added a "#pragma export list C_*" line for each function to the code. I chose

Re: FIPS compliance (repeat)

2002-03-27 Thread Wan-Teh Chang
Patrick wrote: This is a repeat question; missed the response; please copy meat my email address as well if possible, thanks: Is NSS' crypto engine still FIPS complinat? If so why isn't it documented at http://www.mozilla.org/projects/security/pki/nss/overview.html? We are in the middle

[ANNOUNCE] NSS 3.4 Release Candidate 2

2002-04-01 Thread Wan-Teh Chang
by the end of this week and expect this release candidate to be close to the final RTM build. Please help us test this release candidate and file bug reports if you run into any problems. Thank you. Wan-Teh Chang

Re: nss building on WIN2k

2002-04-16 Thread Wan-Teh Chang
bonny joy wrote: hello I have a question on NSS building on WIN2k can i buils NSS 3.2.1 on win2k i tried but the following error is coming Microsoft (R) Segmented Executable Linker Version 5.60.339 Dec 5 1994

Re: [Help] NSPR for NSS 3.4.1 RTM

2002-05-02 Thread Wan-Teh Chang
Maggot wrote: Hi, I would like to know where I could get working binaries of NSPR RTM for NSS 3.4.1 RTM (Windows 95 or NT). I would like to have both the debug (DBG.OBJ) and release (OPT.OBJ) versions of this NSPR. NSS 3.4.1 was compiled against NSPR 4.1.2 and was tested against both

Re: [Help] NSPR for NSS 3.4.1 RTM

2002-05-07 Thread Wan-Teh Chang
Maggot wrote: Both NSS and the NSPR DLLs are located in the same directory. Good. NSS 3.4.1 RTM (OPT.OBJ) works fine with NSPR 4.2 Beta (the one that comes with Mozilla RC1) when I use pk12util to inject a P12 into a Cryptoki token (Schlumberger Cryptoflex e-Gate 32k, slbck.dll,

Re: About the links in the mozilla/dist directory after an NSS build...

2002-05-29 Thread Wan-Teh Chang
Patrick wrote: Hello, About the links in the mozilla/dist directory after an NSS build: how do I get the binaries which are put in the lib directory under mozilla/dist/SunOS5.8_gcc_OPT.OBJ to be actual files and not links??? Build with NSDISTMODE=copy. See

[ANNOUNCE] NSS 3.4.2 Release

2002-06-14 Thread Wan-Teh Chang
://www.mozilla.org/projects/security/pki/nss/nss-3.4.2/nss-3.4.2-release-notes.html Wan-Teh Chang

Re: addbuiltin

2002-06-21 Thread Wan-Teh Chang
Larry J. Rifflle wrote: I'm trying to add the CREN root and Penn State intermediate CA to the builtins. I've figure out that I need security/nss/cmd/addbuiltin to get them in the right format for certdata.txt but I can't figure out how to get addbuiltin to compile. First, build NSS as

Re: How to run NSS3.1.1 ?

2002-06-27 Thread Wan-Teh Chang
daisy wrote: I download NSS3.1.1 at http://www.mozilla.org/download.html Thanks. I fixed the NSS download URL in that page. and in NSS test suite, the command all.sh that it can run in win2000 platform? If yes, how to run all.sh? You will need MKS Toolkit to run all.sh on Windows 2000. It

Re: build problems won't go away!

2002-07-10 Thread Wan-Teh Chang
Ken Culbert wrote: I was following the instructions from the LDAP C SDK page; there's evidently something wrong, because when I followed the NSS instructions, it built without a problem. The big difference is in the checkout instructions: NSS references NSPRPUB_RELEASE_4_1_2

Re: BUILD ERROR

2002-07-10 Thread Wan-Teh Chang
Muhammad Umar Janjua wrote: I am building nss on windows. I have downlaoded winziptools set the OS_TARGET=WINNT and issued gmake //without build_nss_all command But i receive a build error -- gmake[2]: Entering directory

Re: build problems won't go away!

2002-07-11 Thread Wan-Teh Chang
Ken Culbert wrote: The easiest solution is to follow the LDAP C SDK instructions but replace NSPR_4_2_RELEASE by NSPRPUB_RELEASE_4_1_2. If you want to use NSPR_4_2_RELEASE, you need to 1. set the environment variable NSPR_AUTOCONF to 1; and 2. make sure you have the necessary tools to run

Re: SSL Cert Subject Name

2002-07-26 Thread Wan-Teh Chang
dhiva wrote: When can we expect the implementation for the SubjectAltName? http://www.ietf.org/rfc/rfc2459.txt - Jan 1999 Section 4.2.1.7 Subject Alternative Name http://www.ietf.org/rfc/rfc3280.txt -April 2002 Section 4.2.1.7 Subject Alternative Name At Nelson's suggestion, we will

Re: Bug? in CRL Parser

2002-07-26 Thread Wan-Teh Chang
Wan-Teh Chang wrote: Thank you for providing the detailed debug information. Now it's obvious why we crash in pk11_CollectCrls. I opened bug 156801 (http://bugzilla.mozilla.org/show_bug.cgi?id=156801) for this problem. This one is easy to fix. It's not clear why CERT_DecodeDERCrl

Re: crash in win32, PSM enabled, optimized builds in softokn3.dll

2002-08-01 Thread Wan-Teh Chang
Seth Spitzer wrote: I built my own, win32, PSM enabled, optimized version of mozilla and it was crashing when I went to secure sites. The stack trace wasn't very useful, all it had was softokn3.dll on the stack. What's worse is that debug builds didn't crash. But, good news: leaf

  1   2   3   >