Re: [ANNOUNCE] NSS 3.12.3.1 Release

2009-07-31 Thread Nelson Bolyard
On 2009-07-31 12:38 PDT, Ian G wrote: > On 31/07/2009 11:29, William L. Hartzell wrote: >> Nelson B Bolyard wrote: >>> Some lax CAs will evidently issue certs with just about anything in the >>> DNS names. I'd pull the plug on them if I could find them, but the >>> presenters at Black Hat were car

Re: having problem withnsICertOverrideService.RememberValidityOverride()

2009-07-31 Thread Nelson B Bolyard
On 2009-07-31 14:41 PDT, Grant Gayed wrote: > Hi Nelson, thanks for the quick response, > > I think it is looking for a certificate object. I don't have a full stack, > but here's a partial list of the calls that lead up to the C_FindObjects() > invocation (firefox 3.0.9): > > find_objects (NSST

Re: having problem withnsICertOverrideService.RememberValidityOverride()

2009-07-31 Thread Grant Gayed
Hi Nelson, thanks for the quick response, I think it is looking for a certificate object. I don't have a full stack, but here's a partial list of the calls that lead up to the C_FindObjects() invocation (firefox 3.0.9): find_objects (NSSToken *,nssSession *,CK_ATTRIBUTE_PTR,CK_ULONG,PRUint32,PRS

Re: [ANNOUNCE] NSS 3.12.3.1 Release

2009-07-31 Thread Ian G
On 31/07/2009 11:29, William L. Hartzell wrote: Nelson B Bolyard wrote: On 2009-07-30 19:46 PDT, Ian G wrote: On 31/7/09 04:29, Nelson B Bolyard wrote: ... So, a name with a NULL in it will appear as something like www.mybank.com\00*.badguy.org There must be something I am missing. Since whe

Re: [ANNOUNCE] NSS 3.12.3.1 Release

2009-07-31 Thread William L. Hartzell
Nelson B Bolyard wrote: On 2009-07-30 19:46 PDT, Ian G wrote: On 31/7/09 04:29, Nelson B Bolyard wrote: ... So, a name with a NULL in it will appear as something like www.mybank.com\00*.badguy.org There must be something I am missing. Since when is a NULL a legal character in a domain? R