Re: certutil - iPaddress SubjectAltName extension

2014-07-14 Thread Bernhard Thalmayr
Thanks a lot for the details Kai, much appreciated. Indeed I was referring to options '-7', '-8' as they are decribed at https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil I was not aware of '--extSAN' as it seems to be missing from the above doc. Thanks fo

Re: The TPM is dead, long live the TEE!

2014-07-14 Thread Falcon Darkstar Momot
On 12/07/2014 05:33, Anders Rundgren wrote: > Somewhat unfortunate for Microsoft and Intel who have "bet the house" > on TPMs (Trusted Platform Modules), all their competitors in the > mobile space including Google and Apple, have rather settled on > embedded TEE (Trusted Execution Environment) sch

Re: certutil - iPaddress SubjectAltName extension

2014-07-14 Thread Kai Engert
On Mon, 2014-07-14 at 10:47 +0200, Bernhard Thalmayr wrote: > What is the reason, why certutil supports 'dNSName' GeneralNames for > SubjectAltName but not 'iPAddress' (RFC 3270 secion 4.2.1.7)? Do you refer to the command line parameters -7 and -8 ? I don't know why this subset was chosen in the

The TPM is dead, long live the TEE!

2014-07-14 Thread Anders Rundgren
Somewhat unfortunate for Microsoft and Intel who have "bet the house" on TPMs (Trusted Platform Modules), all their competitors in the mobile space including Google and Apple, have rather settled on embedded TEE (Trusted Execution Environment) schemes enabling systems like this: http://www.nas

Re: NSS Custom Crypto Module

2014-07-14 Thread ramahmoo
Is there any documentation about how to use ckfw or someone has to read and understand it from source examples erc.? -- View this message in context: http://mozilla.6506.n7.nabble.com/NSS-Custom-Crypto-Module-tp319226p319424.html Sent from the Mozilla - Cryptography mailing list archive at Nabb

certutil - iPaddress SubjectAltName extension

2014-07-14 Thread Bernhard Thalmayr
Hi experts, although I'm pretty sure this has been asked before I could not find any pointers in the archive. What is the reason, why certutil supports 'dNSName' GeneralNames for SubjectAltName but not 'iPAddress' (RFC 3270 secion 4.2.1.7)? Especially Directory Servers (used for 'native LDAP'