Re: How do I reset a password of slot for soft-token after removing the token

2008-09-10 Thread Subrata Mazumdar
Thanks Robert for your suggestion. I realized that I have to release all reference to the slot. After resetting the token, the slot comes to normal state after I quit form the dialog window that I have used to release the initialized slot. About the prompting for old password during token initial

Re: Cannot make 3.12 on FreeBSD 7.0

2008-09-10 Thread Wan-Teh Chang
On Wed, Sep 10, 2008 at 4:48 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Wan-Teh Chang wrote, On 2008-09-10 16:27: > >> I just added NSS 3.12 build instructions with this information. The file >> may take a few hours to show up on the website: >> http://www.mozilla.org/projects/security/pki/

Re: New documentation: NSPR functions required for using NSS

2008-09-10 Thread Wan-Teh Chang
On Tue, Sep 9, 2008 at 8:37 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Rob Crittenden wrote, On 2008-09-09 20:18: > >> Does this mean than an explicit PR_Init() is not required? > > Whenever you call a public PR_ function, if NSPR is not already initialized, > it will get initialized by that

Re: signtool error

2008-09-10 Thread Nelson B Bolyard
johst wrote, On 2008-09-09 23:10: > I'm getting the following when trying to sign a directory with html > and javascript in: What version of NSS are you using? > $ signtool -d . -k "Absolute Security's VeriSign, Inc. ID" -Z > download.jar download > Generating download/META-INF/manifest.mf fil

Re: Cannot make 3.12 on FreeBSD 7.0

2008-09-10 Thread Nelson B Bolyard
Wan-Teh Chang wrote, On 2008-09-10 16:27: > I just added NSS 3.12 build instructions with this information. The file > may take a few hours to show up on the website: > http://www.mozilla.org/projects/security/pki/nss/nss-3.12/nss-3.12-build.html I thought the plan was to not increase the amount

Re: Cannot make 3.12 on FreeBSD 7.0

2008-09-10 Thread Wan-Teh Chang
On Tue, Sep 9, 2008 at 2:56 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Paul Hoffman wrote, On 2008-09-09 13:52: >> Greetings again. I'm trying to build 3.12 on FreeBSD 7.0. I follow >> the directions on >> >>

Re: Problematic Situation

2008-09-10 Thread Nelson B Bolyard
Cagdas wrote, On 2008-09-09 23:41: > We have a problem about the trust issues with Mozilla Firefox 3. Even > though there was a correct configuration on Apache2 web server, > Firefox 3 cannot recognize our root certificates. The error code is > "sec_error_unknown_issuer". The target web site is: >

Re: Problematic Situation

2008-09-10 Thread Julien R Pierre - Sun Microsystems
This is a classic case of a server not sending intermediate CA cert(s). Your server is misconfigured. Cagdas wrote: > We have a problem about the trust issues with Mozilla Firefox 3. Even > though there was a correct configuration on Apache2 web server, > Firefox 3 cannot recognize our root certi

Re: Cannot make 3.12 on FreeBSD 7.0

2008-09-10 Thread Julien R Pierre - Sun Microsystems
Wan-Teh Chang wrote: > > 68 MOZ_OBJFORMAT := $(shell test -x /usr/bin/objformat && > /usr/bin/objformat || echo elf) > 69 > 70 ifeq ($(MOZ_OBJFORMAT),elf) > 71 DLL_SUFFIX = so > 72 else > 73 DLL_SUFFIX = so.1.0 > 74 endif > > Let's focus on line 68. On your Fr

Re: Cannot make 3.12 on FreeBSD 7.0

2008-09-10 Thread Wan-Teh Chang
On Tue, Sep 9, 2008 at 5:28 PM, Wan-Teh Chang <[EMAIL PROTECTED]> wrote: > On Tue, Sep 9, 2008 at 4:52 PM, Paul Hoffman <[EMAIL PROTECTED]> wrote: >> >> I nuked mozilla/* and used the two cvs commands above. The make now ends >> with: >> >> /usr/bin/ld: cannot find -lnssutil3 >> gmake[3]: *** >> [

Re: Problematic Situation

2008-09-10 Thread Eddy Nigg
Cagdas: > > SSLEngine on > SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW: > +SSLv2:+EXP:+eNULL > SSLCACertificatePath /etc/apache2/ssl.crt SSLCACertificateFile /etc/ > apache2/ssl.crt/kok_s2.crt SSLCertificateChainFile /etc/apache2/ > ssl.crt/TURKTRUST_Elektronik_Sunucu_Sertifikasi_H

Re: Cannot make 3.12 on FreeBSD 7.0

2008-09-10 Thread Paul Hoffman
>I just added build instructions for 3.11.4 and 3.12.1 to the page > Thank you. That page has a *lot* of variables that the 3.11.4-specific page does not. >I see that you, Paul, were the last previous e

Re: Validation (OCSP) Preferences

2008-09-10 Thread Neil
Kai Engert wrote: > It will also mean that at runtime, each time the browser verifies a > web site cert, we'll have to query two preferences instead of just one > (see implementation of and callers to function GetIsOcspOn). Ah, I had overlooked that version; I thought it was all done via the p