RE: Firefox and ECC TLS ciphersuites

2008-07-25 Thread David Stutzman
I'm trying to do TLS using an ECC ciphersuite. I thought FF3 natively supported it (ECC ciphersuites are enabled in about:config). Using normal downloads of FF3 on either Linux or Windows I'm getting the error that there's no common ciphersuite. Looking at SSLTap, both versions of FF3

Re: Wells Fargo CA inclusion/EV request

2008-07-25 Thread Bruce
On Jul 24, 2:18 pm, Frank Hecker [EMAIL PROTECTED] wrote: Eddy Nigg wrote: Frank, I'd like to know (again) what our policy is in regards of EV audit requirements. As I understand from the bug report, Wells Fargo didn't actually absolved the EV audit, but some EV readiness audit. I think

Cert MIME types (was: adding and removing certificate while FF3 is running?)

2008-07-25 Thread Michael Ströder
Nelson B Bolyard wrote: I suggest you look at http://developer.mozilla.org/en/docs/NSS_Certificate_Download_Specification for ideas on importing certs. I wonder why Mozilla doesn't support application/pkix-cert and application/pkix-crl specified in http://www.rfc-editor.org/rfc/rfc2585.txt

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread mozilla
I expected FF3.0.1 to do TLS with the specific ECC ciphersuite that you identify. However, my FF3 is not offering the ECC suites in its client hello. I downloaded FF3.0.1 from the mozilla.com site yesterday (7/24/08). I just did the quick download without any custom configuration. (There should

Fwd: [ekmi] Public Review of SKSML v1.0

2008-07-25 Thread Arshad Noor
FYI. The OASIS EKMI Technical Committee would be grateful for any comments received from members of this forum about the key-management protocol. If you are interested in reviewing a working implementation of an early version of this protocol, you can get the implementation here:

Re: Comparison of OpenSSL and NSS

2008-07-25 Thread Frank Hecker
Julien R Pierre - Sun Microsystems wrote: Copyright owner : RSA security should be removed ! Netscape/Sun/Red Hats are the original developers of most of the code. But they don't hold the copyright (see GPL/LPGL/MPL licenses) Let's not confuse licensing with copyright ownership. AFAIK

Re: Comparison of OpenSSL and NSS

2008-07-25 Thread Wan-Teh Chang
On Thu, Jul 24, 2008 at 7:31 PM, Nelson B Bolyard [EMAIL PROTECTED] wrote: I've been told that GnuTLS's API only supports carrying non-binary text strings as application data, and doesn't facilitate the transmission of pure binary files (e.g. containing lots of zero bytes). I find that

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Wan-Teh Chang
On Fri, Jul 25, 2008 at 6:59 AM, mozilla [EMAIL PROTECTED] wrote: I expected FF3.0.1 to do TLS with the specific ECC ciphersuite that you identify. However, my FF3 is not offering the ECC suites in its client hello. I downloaded FF3.0.1 from the mozilla.com site yesterday (7/24/08). I just did

Re: Cert MIME types

2008-07-25 Thread Nelson B Bolyard
Michael Ströder wrote, On 2008-07-25 06:13: Nelson B Bolyard wrote: I suggest you look at http://developer.mozilla.org/en/docs/NSS_Certificate_Download_Specification for ideas on importing certs. I wonder why Mozilla doesn't support application/pkix-cert and application/pkix-crl specified

Re: Wells Fargo CA inclusion/EV request

2008-07-25 Thread Frank Hecker
Bruce wrote: Not my issue, but I would like to add some clarification. Its a chicken or the egg problem. A CA cannot start issuing EV certificates without first passing an EV Pre-Issuance Readiness Audit (see 35a of the Guidelines). On the other hand, a CA cannot have an WebTrust Audit for EV

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Nelson B Bolyard
Wan-Teh Chang wrote, On 2008-07-25 12:03: On Fri, Jul 25, 2008 at 6:59 AM, mozilla [EMAIL PROTECTED] wrote: I expected FF3.0.1 to do TLS with the specific ECC ciphersuite that you identify. However, my FF3 is not offering the ECC suites in its client hello. I downloaded FF3.0.1 from the

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Nelson B Bolyard
William Price wrote, on 2008-07-24 20:36: [bp] I have built a version of NSS that supports ECC and it appears to be working well. Glad to hear that. How did you test it? If you substituted your own build for the build that came with FF3, and found that it worked in FF3 and enabled ECC, that

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Wan-Teh Chang
On Fri, Jul 25, 2008 at 2:49 PM, Nelson B Bolyard [EMAIL PROTECTED] wrote: I suspect that it MAY be the case that there are other copies of NSS on your system(s), and that those other copies are being used instead of the copies that were downloaded with FF3.x. Perhaps a change is needed to

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Nelson B Bolyard
Wan-Teh Chang wrote, On 2008-07-25 15:07: On Fri, Jul 25, 2008 at 2:49 PM, Nelson B Bolyard [EMAIL PROTECTED] wrote: I suspect that it MAY be the case that there are other copies of NSS on your system(s), and that those other copies are being used instead of the copies that were downloaded