Re: Debugging a SSL transaction on Firefox 2.0.x

2007-03-08 Thread Nelson Bolyard
Peter Djalaliev wrote: > To enable the SSL debugging statements, you need to set the SSLTRACE > environment variable. Possible values are 0-60 (0=no dubugging, > 60=lots) The maximum value is 127, IIRC. However, it may be that presently we are not using values larger than 60. I specifically di

Re: Debugging a SSL transaction on Firefox 2.0.x

2007-03-08 Thread Nelson Bolyard
Jean-Marc Desperrier wrote: > The main difference between Fx 2 and Fx 1.5 is that 56 bits ciphers are > now by default disabled. That is one of the big differences. IINM, other big differences include: - SSL2 support disabled, client hellos are now SSL3, not SSL2. - Added support for TLS hello

Re: Debugging a SSL transaction on Firefox 2.0.x

2007-03-08 Thread Peter Djalaliev
Hello, To enable the SSL debugging statements, you need to set the SSLTRACE environment variable. Possible values are 0-60 (0=no dubugging, 60=lots) If this doesn't work for you (I suppose it depends on your embedding environment), you can place PR_LOG statements within the NSS's SSL code. To g

Re: migrating mozilla keystore to java built in keystore

2007-03-08 Thread kirvesrinta
This error: > # > # An unexpected error has been detected by HotSpot Virtual Machine: > # > # EXCEPTION_ACCESS_VIOLATION (0xc005) at pc=0x77c47a64, pid=720, > tid=2368 > # > # Java VM: Java HotSpot(TM) Client VM (1.5.0_06-b05 mixed mode) > # Problematic frame: > # C [MSVCRT.dll+0x37a64] > #

Re: Debugging a SSL transaction on Firefox 2.0.x

2007-03-08 Thread Pedro DeKeratry
Our device implements the following ciphers: #define USE_SSL_RSA_WITH_RC4_128_MD5 #define USE_SSL_RSA_WITH_RC4_128_SHA #define USE_SSL_RSA_WITH_3DES_EDE_CBC_SHA #define USE_TLS_RSA_WITH_AES_128_CBC_SHA /* must define USE_TLS */ #define USE_TLS_RSA_WITH_AES_256_CBC_SHA /* must define USE_TLS */

Re: Using MSVC as a cross compiler

2007-03-08 Thread Wan-Teh Chang
Neil wrote: Nelson Bolyard wrote: In the usual places where NSS documentation is found. Here's a helpful google search. I couldn't find any reference to cross-compilation

Re: Using MSVC as a cross compiler

2007-03-08 Thread Wan-Teh Chang
Neil wrote: Wan-Teh Chang wrote: You'll see that the Mozilla developers override these make variables used by the NSS coreconf build system when cross-compiling NSS: 199 ifdef CROSS_COMPILE 200 DEFAULT_GMAKE_FLAGS += \ 201 NSINSTALL="$(NSINSTALL)" \ 202 NATIVE_CC="$(HOST_CC)"

Re: Debugging a SSL transaction on Firefox 2.0.x

2007-03-08 Thread Jean-Marc Desperrier
Pedro DeKeratry wrote: The company I work for produces an embedded device that contains an SSLv3/TLSv1.0 implementation. > [...] Firefox 2.0.x does not. The browser sends a RST at the end of nearly every initial SSL handshake. Do you have a list of the ciphers you implement in your device ?

Re: Using MSVC as a cross compiler

2007-03-08 Thread Neil
Nelson Bolyard wrote: Neil wrote: Nelson B wrote: I suggest that you first try to get NSS to build for you in its stand-alone configuration, using only NSS's makefiles and not any of the other mozilla products' makefiles. Where would this be documented, with specific reference to

Re: Using MSVC as a cross compiler

2007-03-08 Thread Neil
Wan-Teh Chang wrote: None of the NSS developers cross-compiles NSS. (The closest thing we do to cross-compilation is to build the Windows CE binaries on Windows 2000/XP.) So we're not familiar with how the Mozilla developers cross-compile NSS. I don't think many Mozilla developers cross-co