Re: How important is shlibsign?

2009-10-16 Thread Robert Relyea
On 10/16/2009 11:28 AM, CB wrote: > Follow on information; > > I was able to get the host shlibsign to run by editing the sign.sh > script, end commenting out all the environment variables it exports, > which pointed into cross-compiled libraries. Yes, the problem was your host was picking up the c

Re: How important is shlibsign?

2009-10-16 Thread Wan-Teh Chang
On Fri, Oct 16, 2009 at 11:28 AM, CB wrote: > Follow on information; > > I was able to get the host shlibsign to run by editing the sign.sh > script, end commenting out all the environment variables it exports, > which pointed into cross-compiled libraries. So, the host version was > able to run a

Re: How important is shlibsign?

2009-10-16 Thread CB
Follow on information; I was able to get the host shlibsign to run by editing the sign.sh script, end commenting out all the environment variables it exports, which pointed into cross-compiled libraries. So, the host version was able to run and process the files it needed to. Is that going to br

How important is shlibsign?

2009-10-16 Thread CB
I'm cross compiling nss to PPC, and during the install phase, the make runs a shlibsign utility. At first, it couldn't run because it had been built for the target hardware. So, i found a shlibsign on the host computer, and tried to use that, but get a message; ".../libssl3.so: ELF file data enc

Re: need help cross compiling nss

2009-10-16 Thread CB
nvm -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: OCSP responder key/certificate thoughts

2009-10-16 Thread Jean-Marc Desperrier
Kyle Hamilton wrote: I'm trying to figure out how much of the OCSP slowness and server underpowering is due to the sizes of the keys used, or limitations of the HSMs (and drivers) that these systems are using. I think little, but I might be wrong. If there's really a problem at this level, I w

Re: How to "log out" of SDR?

2009-10-16 Thread Neil
Robert Relyea wrote: On 10/15/2009 02:39 AM, Neil wrote: Robert Relyea wrote: If you have no master password set, you have a token that doesn't have 'need login' set in it. NSS will treat such a token as "always logged in". No matter how many times you log out, the token and it's keys ar

Re: mobile phone certificates. Re: why client certs

2009-10-16 Thread Anders Rundgren
Victor, I would characterize your proposal as a variant of the "keeping your credentials in the cloud" vision. Google (how surprising...) is indeed pushing this for Information Cards. Personally, I remain skeptic about the combination of dedicated desktop SW and the cloud, a lighter version onl

RE: mobile phone certificates. Re: why client certs

2009-10-16 Thread Varga Viktor
> > Will this one day reach the PC? No, you will still use the phone as > the token > > (and token selector/executor) while the PC crypto will be bypassed. > NFC > > does the connection together with Wi-Fi. > > > Hmmm! Interesting thoughts. There is a total different approach too: 1. store th