Re: Root certificate authorities

[Dmitry Sokolov]

This probably means you understood the docs right :)
I do not think it is possible with standard mozilla-nss environment

Ritmo2k jcas...@gmail.com wrote in message 
news:mailman.664.1298998686.4383.dev-tech-cry...@lists.mozilla.org...
I have read the docs for the tools at 
http://www.mozilla.org/projects/security/pki/nss/tools/index.html

but I am still unclear as to how or if its even possible to configure
Firefox to implicitly trust all certificate authorities installed in
the Windows Trusted Root Certification Authorities Store?

Any ideas?
Thanks! 


--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

to make all libraries static

[Dmitry Sokolov]

Hi

I am to build some specific NSS bundle for internal use in our application 
(windows only).
At first i try to build certutil.exe free of any dependencies except system 
.dll's


I patched prtypes.h to make all public symbols not  __declspec(dllexport) 
and  __declspec(dllimport) and a number of makefiles. Now i've got certutil 
printing its help to the console but at the moment i ask certutil to do smth 
useful i see it tries to load dlls.


This is because the internals of the NSS explicitly load other NSS' parts as 
a shared libraries.


I can dig into the internals deeper and patch more sources to cut all 
LoadLibrary and GetProcAddress calls but can you tell me before that there 
are no unremovable problems with it? I mean the architecture of the NSS does 
not really require shared modules of code, do it?


Thanks in advance
Dmitry 


--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto