Re: When can we call SSL_PeerCertificate?

2009-06-03 Thread Wan-Teh Chang
Nelson, Thanks a lot for your answer. On Wed, Jun 3, 2009 at 4:25 PM, Nelson B Bolyard wrote: > >> Note: The way Chromium uses NSS to verify SSL server >> certificates has changed since Dan Kegel posted that message. >> Since certificate verification can block indefinitely while >> downloading C

Re: When can we call SSL_PeerCertificate?

2009-06-03 Thread Nelson B Bolyard
On 2009-06-02 11:17 PDT, Wan-Teh Chang wrote: > This message is long. Please bear with me. A mere 73 lines. :) > On 2008-12-18, Dan Kegel reported in this thread that we can't call > SSL_PeerCertificate after the bad-certificate callback function returns > because the peer certificate has been

Re: The element

2009-06-03 Thread Ian Hickson
On Sun, 12 Apr 2009, Nelson B Bolyard wrote: > Yngve Nysaeter Pettersen wrote: > >> > >> The default format, introduced by Netscape, is the SPKAC format, see > >> the above link, and includes the public key and the Keygen challenge > >> attribute, and is signed by the private key. > >> > >> The a

JCA (Mozilla-JSS) Problem in SecretKeySpec for AES

2009-06-03 Thread agentman97
Hi, I am trying to run the following example code for Mozilla-JSS provider but it always gives:"java.security.InvalidKeyException: Key is not the right type for this algorithm" for init function. The same code runs perfectly fine with Sun default provider. Please let me know if there is anything

Re: S/MIME in Thunderbird

2009-06-03 Thread Nelson B Bolyard
On 2009-06-01 12:07 PDT, Andrew Manore wrote: > I'm not able to see what encryption algorithms Thunderbird 2.0.x is > using. From what I've been able to tell (through downloading the > encrypted message into Microsoft Outlook), Thunderbird is using 3DES > encryption with SHA-1 hashes. Thunderbi

Re: issue with a lot of certificates and keys in DB

2009-06-03 Thread Nelson B Bolyard
On 2009-06-03 07:02 PDT, David Stutzman wrote: > I have a DB that has just shy of 7000 keys/certs in it. From the > command line using certutil -L takes ~5 mins or so and then finally > starts showing output all at once after the delay. It ends up using > 80-90MB of ram (according to task manag

Re: issue with a lot of certificates and keys in DB

2009-06-03 Thread Wan-Teh Chang
On Wed, Jun 3, 2009 at 7:02 AM, David Stutzman wrote: > I have a DB that has just shy of 7000 keys/certs in it.  From the command > line using certutil -L takes ~5 mins or so and then finally starts showing > output all at once after the delay. It ends up using 80-90MB of ram > (according to task

issue with a lot of certificates and keys in DB

2009-06-03 Thread David Stutzman
I have a DB that has just shy of 7000 keys/certs in it. From the command line using certutil -L takes ~5 mins or so and then finally starts showing output all at once after the delay. It ends up using 80-90MB of ram (according to task manager). certutil -K, however, starts listing keys right