Re: pk11util and pk11mode

2009-03-11 Thread marcelino jr esguerra
wow! thanks for all the help. I've successfully build it now. But then again, how do i use pk11mode in testing pkcs? thanks. marcelino -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: delta crl support

2009-03-11 Thread Eddy Nigg
On 03/12/2009 04:33 AM, Julien R Pierre - Sun Microsystems: No, it isn't. That would be true only if a CRL entry was a single bit. But a CRL entry contains the serial number, revocation date, reason code, and possibly other information. It's also ASN.1 encoded. A CRL entry is rarely less than ab

Re: delta crl support

2009-03-11 Thread Julien R Pierre - Sun Microsystems
Eddy, Eddy Nigg wrote: On 03/12/2009 04:04 AM, Nelson B Bolyard: In our organization we use nss to validate CRLs of the Belgian Government. In a few months it is expected that these CRLs will grow exponentially. It will be necessary to download many gigabytes of CRLs each day. So, you see thi

Re: delta crl support

2009-03-11 Thread Eddy Nigg
On 03/12/2009 04:04 AM, Nelson B Bolyard: In our organization we use nss to validate CRLs of the Belgian Government. In a few months it is expected that these CRLs will grow exponentially. It will be necessary to download many gigabytes of CRLs each day. So, you see this problem coming in advanc

Re: pk11util and pk11mode

2009-03-11 Thread Julien R Pierre - Sun Microsystems
Wan-Teh Chang wrote: 2009/3/10 marcelino jr esguerra : i have these: mozilla/nsprpub mozilla/dbm mozilla/security/nss mozilla/security/coreconf mozilla/security/dbm i downloaded the MozillaBuildSetup-1.3.exe and installed it. i use the start-msvc9.bat and went to mozilla/security/nss then i

Re: delta crl support

2009-03-11 Thread Nelson B Bolyard
dave ("Mike") davesons wrote, On 2009-03-11 08:52: > In our organization we use nss to validate CRLs of the Belgian Government. > In a few months it is expected that these CRLs will grow exponentially. > It will be necessary to download many gigabytes of CRLs each day. So, you see this problem

Re: Current algorithm support for Firefox?

2009-03-11 Thread Jean-Marc Desperrier
Wan-Teh Chang a écrit : On Tue, Mar 10, 2009 at 4:42 PM, Kyle Hamilton wrote: Hey, I'm just trying to figure out what the current algorithms that Firefox supports are? Specifically, I'm trying to figure out what hash algorithms, but the symmetric and asymmetric algorithms would be useful as we

Re: ComSign Root Inclusion Request

2009-03-11 Thread Kyle Hamilton
Since Eddy's in Israel and thus most likely knows Hebrew (and if not, he knows someone who can translate it well enough for him -- and he has both a vested interest in ensuring he gets it right and a good track record with his contributions to the Mozilla CA vetting process), I propose holding acti

Re: ComSign Root Inclusion Request

2009-03-11 Thread Eddy Nigg
On 03/11/2009 05:51 PM, michal...@gmail.com: Hi Regarding you questions Comsign operate under the Israeli Electronic Signature Law. Here is link for all the regulation that derivative from the law. Unfortunately this link is in Hebrew (I hope you can translate it) http://www.justice.gov.il/MOJHeb

Re: pk11util and pk11mode

2009-03-11 Thread Wan-Teh Chang
2009/3/10 marcelino jr esguerra : > i have these: >  mozilla/nsprpub >  mozilla/dbm >  mozilla/security/nss >  mozilla/security/coreconf >  mozilla/security/dbm > i downloaded the MozillaBuildSetup-1.3.exe and installed it. > i use the start-msvc9.bat and went to mozilla/security/nss > then i enter

Re: ComSign Root Inclusion Request

2009-03-11 Thread michaldor
Hi Regarding you questions Comsign operate under the Israeli Electronic Signature Law. Here is link for all the regulation that derivative from the law. Unfortunately this link is in Hebrew (I hope you can translate it) http://www.justice.gov.il/MOJHeb/RashamGormimMashrim/HokVetakanot Comsign is

RE: delta crl support

2009-03-11 Thread dave davesons
Dear, In our organization we use nss to validate CRLs of the Belgian Government. In a few months it is expected that these CRLs will grow exponentially. It will be necessary to download many gigabytes of CRLs each day. Therefore, delta CRL seem to become necessary. Is there already any progress on

RE: SV: Questions about Potentially Problematic Practices

2009-03-11 Thread Varga Viktor
Thank you, now i know that Firefox doesnt want to create a request like this. üdvözlettel/best regards: Varga Viktor rendszerüzemeltetési és vevőszolgálati vezető Netlock Kft. -Original Message- From: dev-tech-crypto-bounces+varga_v=netlock...@lists.mozilla.org [mailto:dev-tech-crypto-

Re: SV: Questions about Potentially Problematic Practices

2009-03-11 Thread Nelson Bolyard
Jean-Marc Desperrier wrote, On 2009-03-10 04:55: > Peter Lind Damkjær wrote: >> Varga Viktor wrote: >>> >>> OCSP request with multiple certificate from different CA >>> -- >>> >>> The RFC has the possibility to send multiple certificate serial number into >>> OCSP request. It is not de

Re: pk11util and pk11mode

2009-03-11 Thread Nelson B Bolyard
marcelino jr esguerra wrote, On 2009-03-10 21:29: > i downloaded the MozillaBuildSetup-1.3.exe and installed it. > i use the start-msvc9.bat and went to mozilla/security/nss > then i entered: gmake nss_build_all > > but then, i have this error: > ... > creating pr/src/threads/combined/Makefile >