Re: [Fwd: Reminder - SSL Certificate for *.startcom.org expires in 10 Days]

2008-12-22 Thread Ian G
On 22/12/08 04:16, Eddy Nigg wrote: Not sure if this is a reason to disable a root, but it's certainly illegal business practice. Hopefully we can settle this with Comodo directly in appropriate manner. Seems like the business is in Denmark, and claims Danish law and courts. Which law are yo

Building NSS on Vista

2008-12-22 Thread ps_mitrofanov
Hi. I'm asking for help :) When I try to build NSS on Windows Vista, I've go build_coreconf error 1. Is it possible to build NSS on Vista ? If it is possible, then please tell me how? ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org htt

RE: Building NSS on Vista

2008-12-22 Thread David Stutzman
Unless you're intimate with the NSS build system and know enough to trim things down...then this set of instructions is the best thing. I've built NSS on Vista using this wiki page: https://developer.mozilla.org/En/Windows_Build_Prerequisites -Original Message- From: dev-tech-crypto-bou

Re: [Fwd: Reminder - SSL Certificate for *.startcom.org expires in 10 Days]

2008-12-22 Thread Eddy Nigg
On 12/22/2008 11:11 AM, Ian G: On 22/12/08 04:16, Eddy Nigg wrote: Not sure if this is a reason to disable a root, but it's certainly illegal business practice. Hopefully we can settle this with Comodo directly in appropriate manner. Seems like the business is in Denmark, and claims Danish la

Re: Building NSS on Vista

2008-12-22 Thread ps_mitrofanov
Thank you, David Stutzman. I hope this information will help me. ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

delta crl support

2008-12-22 Thread sg4all
Dear all, does the current version of nss already support delta crls? I can only find old information about this. Where can I find up to date info about such information? thanks ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://

Re: Building NSS on Vista

2008-12-22 Thread Nelson B Bolyard
ps_mitrofa...@mail.ru wrote, On 2008-12-22 03:33: > Hi. I'm asking for help :) When I try to build NSS on Windows Vista, > I've go build_coreconf error 1. Is it possible to build NSS on Vista ? > If it is possible, then please tell me how? Sounds like you might have had one or more of these issue

Re: delta crl support

2008-12-22 Thread Nelson B Bolyard
sg4all wrote, On 2008-12-22 06:46: > Dear all, > > does the current version of nss already support delta crls? No. Presently, No version of NSS supports delta CRLs. There are no definite plans to do so, at this time. It has been on the wish list for a long time. > I can only find old informa

Re: Building NSS on Vista

2008-12-22 Thread ps_mitrofanov
On 22 дек, 19:14, Nelson B Bolyard wrote: > ps_mitrofa...@mail.ru wrote, On 2008-12-22 03:33: > > > Hi. I'm asking for help :) When I  try to build NSS on Windows Vista, > > I've go build_coreconf error 1. Is it possible to build NSS on Vista ? > > If it is possible, then please tell me how? > > S

Re: Can't unwrap key into NSS in FIPS mode

2008-12-22 Thread Nelson B Bolyard
alex.agra...@gmail.com wrote, On 2008-12-21 08:02: > I'm working with NSS from JAVA (via JAVA 6 PKCS11 provider on RHEL 5). > My NSS database is configured for FIPS-140 mode. And I try to wrap/ > unwrap AES key with RSA public/private key pair as follows: > > // open NSS keystore > char[

Re: Building NSS on Vista

2008-12-22 Thread Nelson B Bolyard
ps_mitrofa...@mail.ru wrote, On 2008-12-22 08:45: > On 22 дек, 19:14, Nelson B Bolyard wrote: >> ps_mitrofa...@mail.ru wrote, On 2008-12-22 03:33: >> >>> Hi. I'm asking for help :) When I try to build NSS on Windows Vista, >>> I've go build_coreconf error 1. Is it possible to build NSS on Vista ?

Re: Building NSS on Vista

2008-12-22 Thread ps_mitrofanov
On 22 дек, 20:08, Nelson B Bolyard wrote: > ps_mitrofa...@mail.ru wrote, On 2008-12-22 08:45: > Please supply more output from the gmake run, like (say) the last 20 > lines of output There is building log(but there are only 5 lines of output): >>gmake nss_build_all process_begin:CreateProcess((n

Re: Building NSS on Vista

2008-12-22 Thread Glen Beasley
hi, ps_mitrofa...@mail.ru wrote: On 22 дек, 20:08, Nelson B Bolyard wrote: ps_mitrofa...@mail.ru wrote, On 2008-12-22 08:45: Please supply more output from the gmake run, like (say) the last 20 lines of output There is building log(but there are only 5 lines of output): gmake

Re: Building NSS on Vista

2008-12-22 Thread Nelson B Bolyard
ps_mitrofa...@mail.ru wrote, On 2008-12-22 09:30: > On 22 дек, 20:08, Nelson B Bolyard wrote: >> ps_mitrofa...@mail.ru wrote, On 2008-12-22 08:45: >> Please supply more output from the gmake run, like (say) the last 20 >> lines of output > > There is building log(but there are only 5 lines of ou

Re: Can't unwrap key into NSS in FIPS mode

2008-12-22 Thread alex . agranov
> Are you sure this is not coming from the cipher.unwrap call? > If you add a line of code to print info about the unwrapped key, > does it show that key to be in the NSS token? Actually, the cipher.unwrap call passes fine, but when I print the unwrappedKey - it looks like a secretKeySpec rather t

Unbelievable!

2008-12-22 Thread Eddy Nigg
https://blog.startcom.org/?p=145 -- Regards Signer: Eddy Nigg, StartCom Ltd. Jabber: start...@startcom.org Blog: https://blog.startcom.org ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-

RE: Unbelievable!

2008-12-22 Thread Robin Alden
Eddy, That reseller's ability to sell Comodo certificates has been suspended while we investigate why they are apparently not fulfilling their contractual obligations to us. We revoked your certificate for mozilla.com. Regards Robin Alden Comodo > -Original Message- > From

Re: Unbelievable!

2008-12-22 Thread Eddy Nigg
On 12/23/2008 03:15 AM, Robin Alden: Eddy, That reseller's ability to sell Comodo certificates has been suspended while we investigate why they are apparently not fulfilling their contractual obligations to us. How can you outsource such a critical part as domain control validation to

RE: Unbelievable!

2008-12-22 Thread Robin Alden
Eddy, As I noted in my prior correspondence, Comodo has undertaken an internal review of the Certstar reseller account. We have informed CertStar that their email violates their contractual obligation to refrain from sending unsolicited emails and that their email could be interpreted as mislead

Re: Unbelievable!

2008-12-22 Thread Eddy Nigg
On 12/23/2008 03:38 AM, Robin Alden: Eddy, As I noted in my prior correspondence, Comodo has undertaken an internal review of the Certstar reseller account. We have informed CertStar that their email violates their contractual obligation to refrain from sending unsolicited emails and that their

Re: Unbelievable!

2008-12-22 Thread Kyle Hamilton
I believe that this is a symptom of faulty internal control, and that this is direct evidence of not living up to the Mozilla CA policy. I advocate at least temporarily removing the trust bits from Comodo until a new external audit can be completed, with an eye toward ensuring that Comodo, not the

Re: Unbelievable!

2008-12-22 Thread Frank Hecker
Kyle Hamilton wrote: I advocate at least temporarily removing the trust bits from Comodo until a new external audit can be completed, with an eye toward ensuring that Comodo, not the reseller, perform the domain validations. There are two general reasons for pulling a root, to address a clear a

Re: Unbelievable!

2008-12-22 Thread Kyle Hamilton
I agree with all three of these issues -- it's not *just* this reseller, it's potentially the entire reseller network, and it's entirely possible that the problem exists across multiples. (Especially if Comodo delegates full Registration Authority capability without verification, which seems to be