Re: [ANNOUNCE] NSS 3.24 Release

2016-05-23 Thread Martin Thomson
On Mon, May 23, 2016 at 7:29 PM, Julien Pierre wrote: > Will the deprecated functions stop working right away ? Or is there a > scheduled time at which they won't be supported anymore in the future ? There are no plans to remove these. Since they are so widely used, I expect that we may never g

Re: [ANNOUNCE] NSS 3.24 Release

2016-05-23 Thread Julien Pierre
Kai, On 5/22/2016 13:45, Kai Engert wrote: Notable Changes: * The following functions have been deprecated (applications should use the new SSL_ConfigServerCert function instead): * SSL_SetStapledOCSPResponses * SSL_SetSignedCertTimestamps * SSL_ConfigSecureServer * SSL_ConfigSecu

Re: [ANNOUNCE] NSS 3.24 Release

2016-05-23 Thread Robert Relyea
On 05/22/2016 04:26 PM, Paul Wouters wrote: On Sun, 22 May 2016, Kai Engert wrote: Subject: [ANNOUNCE] NSS 3.24 Release * NSS softoken has been updated with the latest NIST guidance (as of 2015) What does this relate to? Do you have the specific FIPS publication? Is this perhaps the GCM IV

RE: [ANNOUNCE] NSS 3.24 Release

2016-05-23 Thread Trick, Daniel
Thanks a ton! From: dev-tech-crypto [dev-tech-crypto-bounces+trick=sit.fraunhofer...@lists.mozilla.org] on behalf of Martin Thomson [m...@mozilla.com] Sent: Monday, May 23, 2016 6:28 PM To: mozilla's crypto code discussion list Subject: Re: [ANNOUNCE] NS

Re: How to get details of certificate?

2016-05-23 Thread Martin Thomson
On Sun, May 22, 2016 at 5:16 PM, RJT wrote: > `certutil -L -d sql:${HOME}/.pki/nssdb` That lists the names, then you can dump the details: `certutil -L -d sql:${HOME}/.pki/nssdb -n ` -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/lis

Re: [ANNOUNCE] NSS 3.24 Release

2016-05-23 Thread Martin Thomson
On Mon, May 23, 2016 at 1:55 AM, Trick, Daniel wrote: > make BUILD_OPT=1 Try: make BUILD_OPT=1 nss_build_all You have to build NSPR first, and this does that for you. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

How to get details of certificate?

2016-05-23 Thread RJT
i can get certutil to list the certificates via `certutil -L -d sql:${HOME}/.pki/nssdb` but i need the creation and expiration date time stamps and many other details of the certificate. Renewed certificates often have the same name, so how does one get detailed certificate informat

How to get details on certificates?

2016-05-23 Thread RJT
On CentOS 6 and 7, i can get certutil to list the certificates via `certutil -L -d sql:${HOME}/.pki/nssdb` but i need the creation and expiration date time stamps and many other details of the certificate. How does one get detailed certificate information? i have many certificates that b

Re: The certificate/key database is in an old, unsupported format.

2016-05-23 Thread RJT
On Wednesday, October 14, 2015 at 5:24:43 AM UTC-5, Graham Leggett wrote: > Hi all, > > During a recent Firefox upgrade, all my digital certificates and keys > vanished (as well as all saved passwords, but that is a separate problem). > > The cert8.db and key3.db files are still there, however I

Re: [ANNOUNCE] NSS 3.24 Release

2016-05-23 Thread Trick, Daniel
Hello. I'm trying to build latest NSS. Following the Wiki instructions I do: > |hg clone https://hg.mozilla.org/projects/nspr hg clone > https://hg.mozilla.org/projects/nss cd nss make BUILD_OPT=1 | Result is: > make[2]: Entering directory `/c/Scratchpad/NSS/nss/lib/util' > cl -FoWIN954.0_OPT.