Re: Extrace Mozilla trusted certs into PEM files?

2009-08-10 Thread Georgi Guninski
On Fri, Aug 07, 2009 at 04:29:40PM -0700, Nelson Bolyard wrote:
 OK, so do a cvs checkout over ssh instead.

how do i do this?
(i don't have a cvs account on .m.o)

?

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


SSL input filter read failed error for apache with mod_nss

2009-08-10 Thread Rishi
Hello,
We are trying to make apache work with mod_nss in Solaris10 x86
platform in our project, which currently uses mod_ssl. For that we did
the following.
1) Compiled and installed NSS with NSPR.
2) Installed Apache compiled with mod_ssl
3) Compiled and installed mod_nss for this Apache
4) Created the dummy DB using gencert.sh fie in mod_nss
5) Changed permissions for DB so that we can use it.
The issue we are getting is that the browser(Firefox) says
SSL_Disabled, when trying to run in FIPS mode. When I checked the
server logs, it says SSL Input filter read failed. Cannot connect,
SSL is disabled.  error.

Is there any setting that we are missing?
nss.conf and httpd.conf files.

Versions used:
Mod_nss: 1.0.8
NSS and NSPR: nss-3.12.3.1-with-nspr-4.7.5
Apache: 2.2.11

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: Extrace Mozilla trusted certs into PEM files?

2009-08-10 Thread Nelson B Bolyard
On 2009-08-10 01:52 PDT, Georgi Guninski wrote:
 On Fri, Aug 07, 2009 at 04:29:40PM -0700, Nelson Bolyard wrote:
 OK, so do a cvs checkout over ssh instead.
 
 how do i do this?
 (i don't have a cvs account on .m.o)

You may use anonymous cvs to pull the source.

# setenv CVSROOT :pserver:anonym...@cvs-mirror.mozilla.org:/cvsroot
# cvs login

At the password prompt, type anonymous

# cd local directory to be root of your checked out source tree
# cvs checkout NSS(gets entire tree_
or
# cvs/checkout mozilla/security/nss/whatever file you want


https://developer.mozilla.org/en/Mozilla_Source_Code_Via_CVS#CVS_Client_Settings


These instructions don't show the use of ssh.  I'm not sure that the
combination of anonymous cvs and ssh is available at this time.  It was
not available a year ago, but ...   See

https://developer.mozilla.org/en/Using_SSH_to_connect_to_CVS
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: Extrace Mozilla trusted certs into PEM files?

2009-08-10 Thread Georgi Guninski
On Mon, Aug 10, 2009 at 09:44:55AM -0700, Nelson B Bolyard wrote:
 
 
 https://developer.mozilla.org/en/Mozilla_Source_Code_Via_CVS#CVS_Client_Settings
 
 
 These instructions don't show the use of ssh.  I'm not sure that the
 combination of anonymous cvs and ssh is available at this time.  It was
 not available a year ago, but ...   See
 
 https://developer.mozilla.org/en/Using_SSH_to_connect_to_CVS

yes, i was asking about anonymous ssh - the above url assumes write cvs
access.

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto