CRL update mechanism for mod_nss

Dear all, If you import an updated version of a CRL in mod_nss and you make use of the same nickname: * Is it necessary to restart the web server for mod_nss to take it into account? * Does mod_nss still remember the old CRL? kind regards, Dave -- dev-tech-crypto mailing list dev-tech-crypto@lis

Re: Firefox requires 2 times to select certificate for validation

2009/3/20 Nelson B Bolyard > > dave davesons wrote, On 2009-03-20 10:18: > > Dear all, > > > > I have configure a reverse proxy with client certificate validation. > > > > When accessing the site using firefox, firefox first asks the user to > > select th

Firefox requires 2 times to select certificate for validation

Dear all, I have configure a reverse proxy with client certificate validation. When accessing the site using firefox, firefox first asks the user to select the certificate to authenticate as it should do. After this first authentication, however, the user is asked again to choose the certificate

Re: delta crl support

Hi again, Does anyone know of any benchmarks regarding the size of CRLs towards performance? Or how much CRLs are supported at most? 2009/3/12 dave davesons > Hi, > > thanks for the clarification. BTW: OCSP is available in belgium. But we > like to have a fallback > >

Re: delta crl support

Hi, thanks for the clarification. BTW: OCSP is available in belgium. But we like to have a fallback 2009/3/12 Nelson B Bolyard > dave ("Mike") davesons wrote, On 2009-03-11 08:52: > > > In our organization we use nss to validate CRLs of the Belgian > Government. > > In a few months it is ex

RE: delta crl support

Dear, In our organization we use nss to validate CRLs of the Belgian Government. In a few months it is expected that these CRLs will grow exponentially. It will be necessary to download many gigabytes of CRLs each day. Therefore, delta CRL seem to become necessary. Is there already any progress on