Re: assertion failure in ssl3_config_match_init() when invoking ForceHandshake()

2006-03-30 Thread Nelson B. Bolyard
Peter Djalaliev wrote: > Hello, > > I am trying to upgrade a normal HTTP connection to SSL in the Apache > mod_nss module. So, You're the source of all those questions I've been getting! ;-) > When the mod_nss module is initialized, it calls: > - PR_Init > - PK11_ConfigurePKCS11 > - NSS_Initi

assertion failure in ssl3_config_match_init() when invoking ForceHandshake()

2006-03-30 Thread Peter Djalaliev
Hello,I am trying to upgrade a normal HTTP connection to SSL in the Apache mod_nss module.When the mod_nss module is initialized, it calls: - PR_Init - PK11_ConfigurePKCS11 - NSS_Initialize - NSS_SetDomesticPolicy. Also, I can see that 8 ciphers are being set with SSL_CipherPrefSet()Here are the NS

"Why Phishing Works" paper

2006-03-30 Thread Frank Hecker
This really should be required reading for anyone interested in anti-phishing defenses, the SSL UI, and related topics: http://www.deas.harvard.edu/~rachna/papers/why_phishing_works.pdf Frank -- Frank Hecker [EMAIL PROTECTED] ___ dev-tech-crypto ma

Re: problem enumerating nicknames in certdb (error -12285?)

2006-03-30 Thread Nelson B
David, First, welcome to working with NSS! Your message covers a lot of subjects, and I'm not sure which one is the central point. I'll answer some. > I then wanted to just list out all the certs in the DB and attempted to > get the default certdb (which I assumed is automatically set to the on

Re: ssl without data encryption

2006-03-30 Thread Frank Hecker
Nelson B Bolyard wrote: The client sends the server a list, saying "these are the cipher suites that I (client) support." The server picks one, and says "we'll use this one". The server never says "I support all of these." To give a concrete example of this, with the Apache 2.0 web server and