Re: Fwd: Guidance for NSS, NSPR cross compilation

2014-12-11 Thread Kosuke Kaizuka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Thu, 11 Dec 2014 12:36:33 +0100, Kai Engert wrote: > On Wed, 2014-12-10 at 12:25 +0900, Kosuke Kaizuka wrote: >> Why you choose such an old and out-of-dated version of NSS? >> 3.17.3 (current latest stable) or 3.16.6 (used in current Fx/Tb >> 31.

Re: TLS1.2 support in NSS

2014-12-11 Thread Wan-Teh Chang
On Mon, Dec 8, 2014 at 8:28 PM, sachin gupta wrote: > What would be best version of NSS to support TLS 1.2 in flash, noticing that > TLS 1.2 support was first introduced in version 3.15.1 of NSS ?? In general, use the latest version of NSS. The latest NSS release is 3.17.3: https://developer.moz

Re: libnsssysinit

2014-12-11 Thread David Woodhouse
On Tue, 2014-12-09 at 14:18 +, Martinsson Patrik wrote: > > > It's cute that GNOME keyring can provide PKCS#11 functionality and you > > can store certificates and keys in there. But you aren't *using* that > > functionality. So just unregister the module entirely by deleting its > > file from

Re: Fwd: Guidance for NSS, NSPR cross compilation

2014-12-11 Thread Kai Engert
On Wed, 2014-12-10 at 12:25 +0900, Kosuke Kaizuka wrote: > Why you choose such an old and out-of-dated version of NSS? > 3.17.3 (current latest stable) or 3.16.6 (used in current Fx/Tb 31.x > ESR branches) should be used. Clarification: FF/TB 31.x currently use 3.16.2.3 3.16.6 is older, 3.16.2.3

Re: Accessing Firefox keystore

2014-12-11 Thread helpcrypto helpcrypto
Hi again, sorry for delay. Yes, you can (SHOULD) use SunPKCS#11 to access directly the libraries/modules. You can do it two ways: - attack libraries directly - parse (legacy) secmod.db on Firefox profile to list modules/libraries. Have a look on http://stackoverflow.com/questions/2873581/is-i