Re: [Fwd: Reminder - SSL Certificate for *.startcom.org expires in 10 Days]

2008-12-22 Thread Ian G
On 22/12/08 04:16, Eddy Nigg wrote: Not sure if this is a reason to disable a root, but it's certainly illegal business practice. Hopefully we can settle this with Comodo directly in appropriate manner. Seems like the business is in Denmark, and claims Danish law and courts. Which law are

Building NSS on Vista

2008-12-22 Thread ps_mitrofanov
Hi. I'm asking for help :) When I try to build NSS on Windows Vista, I've go build_coreconf error 1. Is it possible to build NSS on Vista ? If it is possible, then please tell me how? ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org

RE: Building NSS on Vista

2008-12-22 Thread David Stutzman
Unless you're intimate with the NSS build system and know enough to trim things down...then this set of instructions is the best thing. I've built NSS on Vista using this wiki page: https://developer.mozilla.org/En/Windows_Build_Prerequisites -Original Message- From:

Re: [Fwd: Reminder - SSL Certificate for *.startcom.org expires in 10 Days]

2008-12-22 Thread Eddy Nigg
On 12/22/2008 11:11 AM, Ian G: On 22/12/08 04:16, Eddy Nigg wrote: Not sure if this is a reason to disable a root, but it's certainly illegal business practice. Hopefully we can settle this with Comodo directly in appropriate manner. Seems like the business is in Denmark, and claims Danish

Re: Building NSS on Vista

2008-12-22 Thread ps_mitrofanov
Thank you, David Stutzman. I hope this information will help me. ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

delta crl support

2008-12-22 Thread sg4all
Dear all, does the current version of nss already support delta crls? I can only find old information about this. Where can I find up to date info about such information? thanks ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org

Re: Building NSS on Vista

2008-12-22 Thread Nelson B Bolyard
ps_mitrofa...@mail.ru wrote, On 2008-12-22 03:33: Hi. I'm asking for help :) When I try to build NSS on Windows Vista, I've go build_coreconf error 1. Is it possible to build NSS on Vista ? If it is possible, then please tell me how? Sounds like you might have had one or more of these issues:

Re: Building NSS on Vista

2008-12-22 Thread ps_mitrofanov
On 22 дек, 19:14, Nelson B Bolyard nel...@bolyard.me wrote: ps_mitrofa...@mail.ru wrote, On 2008-12-22 03:33: Hi. I'm asking for help :) When I  try to build NSS on Windows Vista, I've go build_coreconf error 1. Is it possible to build NSS on Vista ? If it is possible, then please tell me

Re: Can't unwrap key into NSS in FIPS mode

2008-12-22 Thread Nelson B Bolyard
alex.agra...@gmail.com wrote, On 2008-12-21 08:02: I'm working with NSS from JAVA (via JAVA 6 PKCS11 provider on RHEL 5). My NSS database is configured for FIPS-140 mode. And I try to wrap/ unwrap AES key with RSA public/private key pair as follows: // open NSS keystore char[]

Re: Building NSS on Vista

2008-12-22 Thread Nelson B Bolyard
ps_mitrofa...@mail.ru wrote, On 2008-12-22 08:45: On 22 дек, 19:14, Nelson B Bolyard nel...@bolyard.me wrote: ps_mitrofa...@mail.ru wrote, On 2008-12-22 03:33: Hi. I'm asking for help :) When I try to build NSS on Windows Vista, I've go build_coreconf error 1. Is it possible to build NSS on

Re: Building NSS on Vista

2008-12-22 Thread ps_mitrofanov
On 22 дек, 20:08, Nelson B Bolyard nel...@bolyard.me wrote: ps_mitrofa...@mail.ru wrote, On 2008-12-22 08:45: Please supply more output from the gmake run, like (say) the last 20 lines of output There is building log(but there are only 5 lines of output): gmake nss_build_all

Re: Building NSS on Vista

2008-12-22 Thread Nelson B Bolyard
ps_mitrofa...@mail.ru wrote, On 2008-12-22 09:30: On 22 дек, 20:08, Nelson B Bolyard nel...@bolyard.me wrote: ps_mitrofa...@mail.ru wrote, On 2008-12-22 08:45: Please supply more output from the gmake run, like (say) the last 20 lines of output There is building log(but there are only 5

Re: Can't unwrap key into NSS in FIPS mode

2008-12-22 Thread alex . agranov
Are you sure this is not coming from the cipher.unwrap call? If you add a line of code to print info about the unwrapped key, does it show that key to be in the NSS token? Actually, the cipher.unwrap call passes fine, but when I print the unwrappedKey - it looks like a secretKeySpec rather

Unbelievable!

2008-12-22 Thread Eddy Nigg
https://blog.startcom.org/?p=145 -- Regards Signer: Eddy Nigg, StartCom Ltd. Jabber: start...@startcom.org Blog: https://blog.startcom.org ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org

RE: Unbelievable!

2008-12-22 Thread Robin Alden
Eddy, That reseller's ability to sell Comodo certificates has been suspended while we investigate why they are apparently not fulfilling their contractual obligations to us. We revoked your certificate for mozilla.com. Regards Robin Alden Comodo -Original Message- From:

RE: Unbelievable!

2008-12-22 Thread Robin Alden
Eddy, As I noted in my prior correspondence, Comodo has undertaken an internal review of the Certstar reseller account. We have informed CertStar that their email violates their contractual obligation to refrain from sending unsolicited emails and that their email could be interpreted as

Re: Unbelievable!

2008-12-22 Thread Frank Hecker
Kyle Hamilton wrote: I advocate at least temporarily removing the trust bits from Comodo until a new external audit can be completed, with an eye toward ensuring that Comodo, not the reseller, perform the domain validations. There are two general reasons for pulling a root, to address a clear

Re: Unbelievable!

2008-12-22 Thread Kyle Hamilton
I agree with all three of these issues -- it's not *just* this reseller, it's potentially the entire reseller network, and it's entirely possible that the problem exists across multiples. (Especially if Comodo delegates full Registration Authority capability without verification, which seems to be