Re: NSS for EAP-TLS/PEAP/TTLS/FAST

2009-09-30 Thread Jouni Malinen
On Sep 30, 10:05 pm, Nelson B Bolyard wrote: > These issues need to be brought up to the IETF TLS mailing list, ASAP. > The last thing we want, IMO, is to have to implement a bunch of > slightly-different incompatible extractor functions. :-/ It seems to be somewhat late to go through the IETF WG

Re: NSS for EAP-TLS/PEAP/TTLS/FAST

2009-09-30 Thread Jouni Malinen
On Sep 29, 11:50 pm, Douglas Stebila wrote: > You can find a patch implementing draft-ietf-tls-extractor-07 in NSS   > attached to bug 507359. > > https://bugzilla.mozilla.org/show_bug.cgi?id=507359 Thanks! This looks very useful. However, when testing the implementation, I did run into interoper

NSS for EAP-TLS/PEAP/TTLS/FAST

2009-09-29 Thread Jouni Malinen
I'm looking into using NSS with an EAP-TLS/PEAP/TTLS/FAST implementation. The initial part of this was relatively simple to complete since I already had a working EAP implementation with a wrapper layer to allow the TLS/crypto library to be changed. The NSPR file descriptor concept allowed the TLS