Re: The TLS Report

2008-07-12 Thread Eddy Nigg
Frank Hecker: > After regenerating the server private key (using a 2048-bit modulus), > getting a new certificate (from StartCom), and changing the server > ciphersuites, I managed to get a score of 84 (A), which matches the > highest scores reported for other sites: > Well done! Also interesting

Re: How to export un-encrypted private key using NSS API for OpenSSL base apps

2008-07-12 Thread Nelson B Bolyard
Subrata Mazumdar wrote, On 2008-07-12 13:34: > I have created a self-signed cert using certutil. I want to export the > associated private key in Mozilla Cert/Key DB as an un-encrypted private > key to be used by an OpenSSL based App. > The requirement is to use Mozilla NSS API to export the ke

How to export un-encrypted private key using NSS API for OpenSSL base apps

2008-07-12 Thread Subrata Mazumdar
Hi, I have created a self-signed cert using certutil. I want to export the associated private key in Mozilla Cert/Key DB as an un-encrypted private key to be used by an OpenSSL based App. The requirement is to use Mozilla NSS API to export the key - not OpenSSL API or OpenSSL command line tools

Which piece of code prompts for master password?

2008-07-12 Thread Sune Mølgaard
Hi all, With sm trunk, I get a whole bunch of prompts for the master password on startup. I imagine that the loading/access of/to each tab/account asks the password db for the relevant password, sees that the master password is needed, and then prompts for it. Would it be feasible to enclose t

Re: The TLS Report

2008-07-12 Thread Frank Hecker
Eddy Nigg (StartCom Ltd.) wrote: > Eddy Nigg (StartCom Ltd.): >> Frank Hecker: >>> I tried out my own site on it, and got a C. >> >> LOL, I got a A 80 :-) > > Actually it doesn't honor SAN DNS extension...but it's a cute utility. > Reached a A 82 as well, just need to use the CN value of the ce