Bug 279768: Bring build system to work with --enable-ui-locale. Security part; r=bsmedberg

security/manager/Makefile.in

@@ -138,7 +138,7 @@ DEFAULT_GMAKE_FLAGS += \
 	$(NULL)
 SKIP_CHK=1
 endif
-SUBMAKEFILES = boot/Makefile ssl/Makefile pki/Makefile
+SUBMAKEFILES = boot/Makefile ssl/Makefile pki/Makefile locales/Makefile
 
 include $(topsrcdir)/config/rules.mk
 
@@ -160,6 +160,7 @@ endif
 dependclean export packages chrome::
 	$(MAKE) -C boot $@
 	$(MAKE) -C ssl $@
+	$(MAKE) -C locales $@
 ifdef MOZ_XUL
 	$(MAKE) -C pki $@
 endif
@@ -210,6 +211,7 @@ endif
 endif
 	$(MAKE) -C boot $@
 	$(MAKE) -C ssl $@
+	$(MAKE) -C locales $@
 ifdef MOZ_XUL
 	$(MAKE) -C pki $@
 endif
@@ -231,6 +233,7 @@ ifdef HAVE_FREEBL_MODULES
 endif
 	$(MAKE) -C boot $@
 	$(MAKE) -C ssl $@
+	$(MAKE) -C locales $@
 ifdef MOZ_XUL
 	$(MAKE) -C pki $@
 endif
@@ -238,6 +241,7 @@ endif
 clean clobber clobber_all realclean distclean depend::
 	$(MAKE) -C boot $@
 	$(MAKE) -C ssl $@
+	$(MAKE) -C locales $@
 ifdef MOZ_XUL
 	$(MAKE) -C pki $@
 endif
@@ -252,3 +256,4 @@ echo-requires-recursive::
 	$(MAKE) -C boot $@
 	$(MAKE) -C ssl $@
 	$(MAKE) -C pki $@
+	$(MAKE) -C locales $@

security/manager/locales/Makefile.in

@@ -0,0 +1,47 @@
+# ***** BEGIN LICENSE BLOCK *****
+# Version: MPL 1.1/GPL 2.0/LGPL 2.1
+#
+# The contents of this file are subject to the Mozilla Public License Version
+# 1.1 (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+# http://www.mozilla.org/MPL/
+#
+# Software distributed under the License is distributed on an "AS IS" basis,
+# WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+# for the specific language governing rights and limitations under the
+# License.
+#
+# The Original Code is the Mozilla Browser code.
+#
+# The Initial Developer of the Original Code is
+# Benjamin Smedberg <bsmedberg@covad.net>
+# Portions created by the Initial Developer are Copyright (C) 2004
+# the Initial Developer. All Rights Reserved.
+#
+# Contributor(s):
+#
+# Alternatively, the contents of this file may be used under the terms of
+# either the GNU General Public License Version 2 or later (the "GPL"), or
+# the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+# in which case the provisions of the GPL or the LGPL are applicable instead
+# of those above. If you wish to allow use of your version of this file only
+# under the terms of either the GPL or the LGPL, and not to allow others to
+# use your version of this file under the terms of the MPL, indicate your
+# decision by deleting the provisions above and replace them with the notice
+# and other provisions required by the GPL or the LGPL. If you do not delete
+# the provisions above, a recipient may use your version of this file under
+# the terms of any one of the MPL, the GPL or the LGPL.
+#
+# ***** END LICENSE BLOCK *****
+
+DEPTH		= ../../..
+topsrcdir	= @top_srcdir@
+srcdir		= @srcdir@
+VPATH		= @srcdir@
+relativesrcdir = security/manager/locales
+
+include $(DEPTH)/config/autoconf.mk
+
+DEFINES += -DAB_CD=$(AB_CD)
+
+include $(topsrcdir)/config/rules.mk

security/manager/locales/en-US/chrome/pipnss/pipnss.properties

@@ -0,0 +1,286 @@
+#
+# ***** BEGIN LICENSE BLOCK *****
+# Version: MPL 1.1/GPL 2.0/LGPL 2.1
+#
+# The contents of this file are subject to the Mozilla Public License Version
+# 1.1 (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+# http://www.mozilla.org/MPL/
+#
+# Software distributed under the License is distributed on an "AS IS" basis,
+# WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+# for the specific language governing rights and limitations under the
+# License.
+#
+# The Original Code is mozilla.org code.
+#
+# The Initial Developer of the Original Code is
+# Netscape Communications Corporation.
+# Portions created by the Initial Developer are Copyright (C) 1998
+# the Initial Developer. All Rights Reserved.
+#
+# Contributor(s):
+#   Javier Delgadillo <javi@netscape.com>
+#   Brian Ryner <bryner@brianryner.com>
+#   Terry Hayes <thayes@netscape.com>
+#   John Gardiner Myers <jgmyers@speakeasy.net>
+#
+# Alternatively, the contents of this file may be used under the terms of
+# either the GNU General Public License Version 2 or later (the "GPL"), or
+# the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+# in which case the provisions of the GPL or the LGPL are applicable instead
+# of those above. If you wish to allow use of your version of this file only
+# under the terms of either the GPL or the LGPL, and not to allow others to
+# use your version of this file under the terms of the MPL, indicate your
+# decision by deleting the provisions above and replace them with the notice
+# and other provisions required by the GPL or the LGPL. If you do not delete
+# the provisions above, a recipient may use your version of this file under
+# the terms of any one of the MPL, the GPL or the LGPL.
+#
+# ***** END LICENSE BLOCK *****
+
+SignedBy=Signed by %S
+CertPassPrompt=Please enter the master password for the %S.
+# the following strings have special requirements:
+# they must fit in a 32 or 64 byte buffer after being translated
+# to UTF8.  Note to translator. It's not easy for you to figure
+# whether the escaped unicode string you produce will fit in 
+# the space allocated.
+#
+# 64 bytes long after conversion to UTF8
+RootCertModuleName=Builtin Roots Module
+#
+# 32 bytes long after conversion to UTF8
+ManufacturerID=Mozilla.org
+#
+# 32  bytes long after conversion to UTF8
+LibraryDescription=PSM Internal Crypto Services
+#
+# 32 bytes long after conversion to UTF8
+TokenDescription=Generic Crypto Services
+#
+# 32 bytes long after conversion to UTF8
+PrivateTokenDescription=Software Security Device
+#
+# 64 bytes long after conversion to UTF8
+SlotDescription=PSM Internal Cryptographic Services
+#
+# 64 bytes long after conversion to UTF8
+PrivateSlotDescription=PSM Private Keys
+#
+# 64
+FipsSlotDescription=PSM Internal FIPS-140-1 Cryptographic Services
+# 64
+FipsPrivateSlotDescription=PSM FIPS-140-1 User Private Key Services
+# 32
+InternalToken=Software Security Device
+# End of size restriction.
+VerifySSLClient=SSL Client Certificate
+VerifySSLServer=SSL Server Certificate
+VerifySSLStepUp=SSL Server with Step-up
+VerifySSLCA=SSL Certificate Authority
+VerifyEmailSigner=Email Signer Certificate
+VerifyEmailRecip=Email Recipient Certificate
+VerifyProtectObjSign=Protected Object Signer
+VerifyObjSign=Object Signer
+VerifyUserImport=User Import Cert
+VerifyCAVerifier=CA Verifier
+VerifyStatusResponder=Status Responder Certificate
+VerifyAnyCA=Any Certificate Authority
+HighGrade=2048 (High Grade)
+MediumGrade=1024 (Medium Grade)
+nick_template=%1$s's %2$s ID
+nick_template_with_num=%1$s's %2$s ID #%3$d
+#These are the strings set for the ASN1 objects in a certificate.
+CertDumpCertificate=Certificate
+CertDumpVersion=Version
+CertDumpVersion1=Version 1
+CertDumpVersion2=Version 2
+CertDumpVersion3=Version 3
+CertDumpSerialNo=Serial Number
+CertDumpOID=Object Identifier
+CertDumpMD2WithRSA=PKCS #1 MD2 With RSA Encryption
+CertDumpMD5WithRSA=PKCS #1 MD5 With RSA Encryption
+CertDumpSHA1WithRSA=PKCS #1 SHA-1 With RSA Encryption
+CertDumpSHA256WithRSA=PKCS #1 SHA-256 With RSA Encryption
+CertDumpSHA384WithRSA=PKCS #1 SHA-384 With RSA Encryption
+CertDumpSHA512WithRSA=PKCS #1 SHA-512 With RSA Encryption
+CertDumpDefOID=Object Identifier (%S)
+CertDumpNULL=NULL
+CertDumpIssuer=Issuer
+CertDumpSubject=Subject
+CertDumpRDN=Relative Distinguished Name
+CertDumpATV=Attribute Type and Value
+CertDumpAVACountry=C
+CertDumpAVAState=ST
+CertDumpAVALocality=L
+CertDumpAVAOrg=O
+CertDumpAVAOU=OU
+CertDumpAVACN=CN
+CertDumpUserID=UID
+CertDumpPK9Email=E
+CertDumpAVADN=DN
+CertDumpAVADC=DC
+CertDumpValidity=Validity
+CertDumpNotBefore=Not Before
+CertDumpNotAfter=Not After
+CertDumpSPKI=Subject Public Key Info
+CertDumpSPKIAlg=Subject Public Key Algorithm
+CertDumpAlgID=Algorithm Identifier
+CertDumpParams=Algorithm Parameters
+CertDumpRSAEncr=PKCS #1 RSA Encryption
+CertDumpIssuerUniqueID=Issuer Unique ID
+CertDumpSubjPubKey=Subject's Public Key
+CertDumpSubjectUniqueID=Subject Unique ID
+CertDumpExtensions=Extensions
+CertDumpCertType=Netscape Certificate Type
+CertDumpNSCertExtBaseUrl=Netscape Certificate Extension Base URL
+CertDumpNSCertExtRevocationUrl=Netscape Certificate Revocation URL
+CertDumpNSCertExtCARevocationUrl=Netscape Certificate Authority Revocation URL
+CertDumpNSCertExtCertRenewalUrl=Netscape Certificate Renewal URL
+CertDumpNSCertExtCAPolicyUrl=Netscape Certificate Authority Policy URL
+CertDumpNSCertExtSslServerName=Netscape Certificate SSL Server Name
+CertDumpNSCertExtComment=Netscape Certificate Comment
+CertDumpNSCertExtLostPasswordUrl=Netscape Lost Password URL
+CertDumpNSCertExtCertRenewalTime=NetscapeCertificate Renewal Time
+CertDumpNetscapeAolScreenname=AOL Screenname
+CertDumpSubjectDirectoryAttr=Certificate Subject Directory Attributes
+CertDumpSubjectKeyID=Certificate Subject Key ID
+CertDumpKeyUsage=Certificate Key Usage
+CertDumpSubjectAltName=Certificate Subject Alt Name
+CertDumpIssuerAltName=Certificate Issuer Alt Name
+CertDumpBasicConstraints=Certificate Basic Constraints
+CertDumpNameConstraints=Certificate Name Constraints
+CertDumpCrlDistPoints=CRL Distribution Points
+CertDumpCertPolicies=Certificate Policies
+CertDumpPolicyMappings=Certificate Policy Mappings
+CertDumpPolicyConstraints=Certificate Policy Constraints
+CertDumpAuthKeyID=Certificate Authority Key Identifier
+CertDumpExtKeyUsage=Extended Key Usage
+CertDumpAuthInfoAccess=Authority Information Access
+CertDumpAnsiX9DsaSignature=ANSI X9.57 DSA Signature
+CertDumpAnsiX9DsaSignatureWithSha1=ANSI X9.57 DSA Signature with SHA1 Digest
+CertDumpAnsiX962ECDsaSignatureWithSha1=ANSI X9.62 ECDSA Signature with SHA1
+CertDumpCertTypeEmail=Email
+CertDumpEmailCA=Email Certificate Authority
+CertDumpKUSign=Signing
+CertDumpKUNonRep=Non-repudiation
+CertDumpKUEnc=Key Encipherment
+CertDumpKUDEnc=Data Encipherment
+CertDumpKUKA=Key Agreement
+CertDumpKUCertSign=Certificate Signer
+CertDumpKUCRLSigner=CRL Signer
+CertDumpCritical=Critical
+CertDumpNonCritical=Not Critical
+CertDumpSigAlg=Certificate Signature Algorithm
+CertDumpCertSig=Certificate Signature Value
+CertDumpExtensionFailure=Error: Unable to process extension
+VerifySSLClient_p=Client
+VerifySSLServer_p=Server
+VerifySSLStepUp_p=Step-up
+VerifySSLCA_p=SSL CA
+VerifyEmailSigner_p=Sign
+VerifyEmailRecip_p=Encrypt
+VerifyProtectObjSign_p=Protected Object Signer
+VerifyObjSign_p=Object Signer
+VerifyUserImport_p=User Import
+VerifyCAVerifier_p=CA Verifier
+VerifyStatusResponder_p=Status Responder
+VerifyAnyCA_p=CA
+VerifiedTrue=true
+VerifiedFalse=false
+PK11BadPassword=The password entered was incorrect.
+SuccessfulP12Backup=Successfully backed up your security certificate(s) and private key(s).
+SuccessfulP12Restore=Successfully restored your security certificate(s) and private key(s).
+PKCS12PasswordInvalid=Could not decode PKCS #12 file.  Perhaps the password you entered was incorrect?
+PKCS12DecodeErr=Failed to decode the file.  Either it is not in PKCS #12 format, has been corrupted, or the password you entered was incorrect.
+PKCS12UnknownErrRestore=Failed to restore the PKCS #12 file for unknown reasons.
+PKCS12UnknownErrBackup=Failed to create the PKCS #12 backup file for unknown reasons.
+PKCS12UnknownErr=The PKCS #12 operation failed for unknown reasons.
+PKCS12InfoNoSmartcardBackup=It is not possible to back up certificates from a hardware security device such as a smart card.
+PKCS12DupData=The certificate and private key already exist on the security device.
+AddModulePrompt=Are you sure you want to install this security module?
+AddModuleName=Module Name: %S
+AddModulePath=Path: %S
+AddModuleSuccess=A new security module has been installed
+AddModuleFailure=Unable to add module
+AddModuleDup=Security Module already exists
+DelModuleBadName=Invalid module name.
+DelModuleWarning=Are you sure you want to delete this security module?
+DelModuleError=Unable to delete module
+DelModuleIntSuccess=Internal security module successfully deleted
+DelModuleExtSuccess=External security module successfully deleted
+ForcedBackup1=You should make a password-protected backup copy of your new security certificate and its associated private key.
+ForcedBackup2=If you ever lose access to your private key by forgetting your personal security password, or by experiencing file corruption, you can restore this private key and certificate from this backup copy.
+ForcedBackup3=To make a copy, click OK. If possible, you should save your backup copy on a floppy disk that you keep in a safe location.
+UnknownCertIssuer=(Unknown Issuer)
+UnknownCertOrg=(Unknown Organization)
+AVATemplate=%S = %S
+SSLDisabled=You cannot connect to %S because SSL is disabled. 
+SSL2Disabled=You cannot connect to %S because SSL version 2 is disabled.
+SSLNoMatchingCiphers=%S and %S cannot communicate securely because they have no common encryption algorithms.
+UsersCertRevoked=Could not establish an encrypted connection with %S because your certificate has been revoked.
+UsersCertExpired=Could not establish an encrypted connection with %S because your certificate is expired.
+UsersCertRejected=Could not establish an encrypted connection because your certificate was rejected by %S. Error Code: %S.
+BadMac=%S received a message with incorrect Message Authentication Code. If the error occurs frequently, contact the website administrator.
+PeerResetConnection=%S has closed the connection. Error Code: %S
+HostResetConnection=The current transfer has been cancelled.
+BadPassword=An incorrect password was provided.
+BadDatabase=There is a problem with your certificate database [Error Code: %S].
+BadServer=%S has sent an incorrect or unexpected message. Error Code: %S
+BadClient=%S has received an incorrect or unexpected message. Error Code: %S
+HostReusedIssuerSerial=You have received an invalid certificate.  Please contact the server administrator or email correspondent and give them the following information:\n\nYour certificate contains the same serial number as another certificate issued by the certificate authority.  Please get a new certificate containing a unique serial number.
+SSLGenericError=Error establishing an encrypted connection to %S. Error Code: %S.
+TimeOut=Connection request timed out.
+PeersCertUntrusted=Could not establish an encrypted connection because certificate presented by %S is not trusted.
+PeersCertRevoked=Could not establish an encrypted connection because certificate presented by %S has been revoked.
+PeersCertExpired=Could not establish an encrypted connection because certificate presented by %S has expired.
+PeersCertWrongDomain=Could not establish an encrypted connection because certificate presented by %S is for a different domain.
+PeersCertBadSignature=Could not establish an encrypted connection because certificate presented by %S has an invalid signature.
+PeersCertNoGood=Could not establish an encrypted connection because certificate presented by %S is invalid or corrupted. Error Code: %S
+CRLExpired=Certificate Revocation List (CRL) from the CA certifying %S is past its Next Update date. Please update the CRL.
+CRLNotYetValid=Certificate Revocation List (CRL) from the CA certifying %S is not yet valid. Please check your system clock.
+CRLSigNotValid=Certificate Revocation List (CRL) from the CA certifying %S has an invalid digital signature.
+CRLSNotValid=Certificate Revocation List (CRL) from the CA certifying %S is not valid.
+OCSPMalformedRequest=Error trying to validate certificate from %S using OCSP - malformed request.
+OCSPRequestNeedsSig=Error trying to validate certificate from %S using OCSP - request needs signature.
+OCSPUnauthorizedReq=Error trying to validate certificate from %S using OCSP - unauthorized request.
+OCSPServerError=Error trying to validate certificate from %S using OCSP - server error.
+OCSPTryServerLater=Error trying to validate certificate from %S using OCSP - server is busy. Please try again later.
+OCSPFutureResponse=Error trying to validate certificate from %S using OCSP - response contains a date which is in the future.
+OCSPOldResponse=Error trying to validate certificate from %S using OCSP - old response.
+OCSPCorruptedResponse=Error trying to validate certificate from %S using OCSP - corrupted or unknown response. Error Code: %S.
+OCSPUnauthorizedResponse=Error trying to validate certificate from %S using OCSP - unauthorized response.
+OCSPUnknownCert=Error trying to validate certificate from %S using OCSP - unknown certificate.
+OCSPNoDefaultResponder=Error trying to validate certificate from %S using OCSP - no default responder specified.
+OCSPDirLookup=Error trying to validate certificate from %S using OCSP - directory lookup error.
+CertInfoIssuedFor=Issued to:
+CertInfoIssuedBy=Issued by:
+CertInfoValid=Valid
+CertInfoFrom=from
+CertInfoTo=to
+CertInfoPurposes=Purposes
+CertInfoStoredIn=Stored in:
+P12DefaultNickname=Imported Certificate
+CrlImportSuccess=The browser successfully imported the certificate revocation list (CRL).
+CrlImportFailure1=The browser cannot import the Certificate Revocation List (CRL).
+CrlImportFailureExpired=A more recent version of this CRL is available.
+CrlImportFailureBadSignature=CRL has an invalid Signature.
+CrlImportFailureInvalid=New CRL has an invalid format.
+CrlImportFailureOld=New CRL is older than the current one.
+CrlImportFailureNotYetValid=The CRL is not yet valid. You might want to check your system clock.
+CrlImportFailureNetworkProblem=Download of the CRL failed due to Network problems.
+CrlImportFailureReasonUnknown=Error Importing CRL to local Database. Error Code: 
+CrlImportFailure2=Please ask your system administrator for assistance.
+NSSInitProblem=Could not initialize the browser's security component. The most likely cause is problems with files in your browser's profile directory. Please check that this directory has no read/write restrictions and your hard disk is not full or close to full. It is recommended that you exit the browser and fix the problem. If you continue to use this browser session, you might see incorrect browser behaviour when accessing security features.
+ProfileSwitchSocketsStillActive=The operation can not be completed because of an internal failure. A secure network communication has not been cleaned up correctly.
+ProfileSwitchCryptoUIActive=This operation is impossible at the current time. Please complete the operation that requests your attention in one of the other open windows.
+VerifyExpired=<Expired>
+VerifyRevoked=<Revoked>
+VerifyNotTrusted=<Not Trusted>
+VerifyIssuerNotTrusted=<Issuer Not Trusted>
+VerifyIssuerUnknown=<Issuer Unknown>
+VerifyInvalidCA=<Invalid CA>
+VerifyUnknown=<Unknown>
+CertNoNickname=(no nickname)
+CertNoEmailAddress=(no email address)

security/manager/locales/en-US/chrome/pipnss/security.properties

@@ -0,0 +1,52 @@
+#
+# ***** BEGIN LICENSE BLOCK *****
+# Version: MPL 1.1/GPL 2.0/LGPL 2.1
+#
+# The contents of this file are subject to the Mozilla Public License Version
+# 1.1 (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+# http://www.mozilla.org/MPL/
+#
+# Software distributed under the License is distributed on an "AS IS" basis,
+# WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+# for the specific language governing rights and limitations under the
+# License.
+#
+# The Original Code is mozilla.org code.
+#
+# The Initial Developer of the Original Code is
+# Netscape Communications Corporation.
+# Portions created by the Initial Developer are Copyright (C) 1998
+# the Initial Developer. All Rights Reserved.
+#
+# Contributor(s):
+#   Sean Cotter <cotter@netscape.com>
+#
+# Alternatively, the contents of this file may be used under the terms of
+# either the GNU General Public License Version 2 or later (the "GPL"), or
+# the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+# in which case the provisions of the GPL or the LGPL are applicable instead
+# of those above. If you wish to allow use of your version of this file only
+# under the terms of either the GPL or the LGPL, and not to allow others to
+# use your version of this file under the terms of the MPL, indicate your
+# decision by deleting the provisions above and replace them with the notice
+# and other provisions required by the GPL or the LGPL. If you do not delete
+# the provisions above, a recipient may use your version of this file under
+# the terms of any one of the MPL, the GPL or the LGPL.
+#
+# ***** END LICENSE BLOCK *****
+
+Title=Security Warning
+MixedContentMessage=You have requested an encrypted page that contains some unencrypted information. Information that you see or enter on this page could easily be read by a third party.
+LeaveSecureMessage=You are about to leave an encrypted page. Information you send or receive from now on could easily be read by a third party.
+EnterSecureMessage=You have requested an encrypted page. The web site has identified itself correctly, and information you see or enter on this page can't easily be read by a third party.
+WeakSecureMessage=You have requested a page that uses low-grade encryption. The web site has identified itself correctly, but information you see or enter on this page could be read by a third party. 
+PostToInsecureFromSecureMessage=Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.##Are you sure you want to continue sending this information?##
+PostToInsecureFromInsecureMessage=The information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.##Are you sure you want to continue sending this information?##
+MixedContentShowAgain=Alert me whenever I'm about to view an encrypted page that contains some unencrypted information.
+LeaveSecureShowAgain=Alert me whenever I leave an encrypted page for one that isn't encrypted. 
+EnterSecureShowAgain=Alert me whenever I am about to view an encrypted page.
+WeakSecureShowAgain=Alert me whenever I am about to view a page that uses low-grade encryption.
+PostToInsecureFromInsecureShowAgain=Alert me whenever I submit information that's not encrypted.
+SecurityButtonTooltipText=Displays security information about the current page
+Continue=Continue

security/manager/locales/en-US/chrome/pippki/PageInfoOverlay.dtd

@@ -0,0 +1,41 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Terry Hayes <thayes@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!ENTITY  pageInfo.securityTab    "Security">
+<!ENTITY  pageInfo.securityHeader "Security information for this page">
+<!ENTITY  pageInfo.view.label     "View">
+<!ENTITY  pageInfo.view.accesskey "V">

security/manager/locales/en-US/chrome/pippki/PrefOverlay.dtd

@@ -0,0 +1,43 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Bob Lord <lord@netscape.com>
+   -   Terry Hayes <thayes@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!ENTITY  masterpass.label             "Master Passwords">
+<!ENTITY  security.label               "Privacy and Security">
+<!ENTITY  ssl.label                    "SSL">
+<!ENTITY  certs.label                  "Certificates">
+<!ENTITY  validation.label             "Validation">

security/manager/locales/en-US/chrome/pippki/certManager.dtd

@@ -0,0 +1,111 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Ian McGreer <mcgreer@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!ENTITY certmgr.title "Certificate Manager">
+
+<!ENTITY certmgr.tab.mine "Your Certificates">
+<!ENTITY certmgr.tab.others "Other People's">
+<!ENTITY certmgr.tab.websites "Web Sites">
+<!ENTITY certmgr.tab.ca "Authorities">
+
+<!ENTITY certmgr.ca.builtins "Built-in CAs">
+<!ENTITY certmgr.ca.mycas "CAs Managed By You">
+
+<!ENTITY certmgr.mine "You have certificates from these organizations that identify you:">
+<!ENTITY certmgr.others "You have certificates on file that identify these people:">
+<!ENTITY certmgr.websites "You have certificates on file that identify these web sites:">
+<!ENTITY certmgr.cas "You have certificates on file that identify these certificate authorities:">
+
+<!ENTITY certmgr.detail.general_tab.title "General">
+<!ENTITY certmgr.detail.prettyprint_tab.title "Details">
+
+<!ENTITY certmgr.subjectinfo.label "Issued To">
+<!ENTITY certmgr.issuerinfo.label "Issued By">
+<!ENTITY certmgr.validity.label "Validity" >
+<!ENTITY certmgr.fingerprints.label "Fingerprints">
+<!ENTITY certmgr.certdetail.title "Certificate Detail">
+<!ENTITY certmgr.certdetail.cn "Common Name (CN)">
+<!ENTITY certmgr.certdetail.o "Organization (O)">
+<!ENTITY certmgr.certdetail.ou "Organizational Unit (OU)">
+<!ENTITY certmgr.certdetail.serialnumber "Serial Number">
+<!ENTITY certmgr.certdetail.sha1fingerprint "SHA1 Fingerprint">
+<!ENTITY certmgr.certdetail.md5fingerprint "MD5 Fingerprint">
+
+<!ENTITY certmgr.editcert.title "Edit Security Certificate Settings">
+<!ENTITY certmgr.editcacert.title "Edit CA certificate trust settings">
+<!ENTITY certmgr.editsslcert.title "Edit web site certificate trust settings">
+<!ENTITY certmgr.editcert.edittrust "Edit trust settings:">
+<!ENTITY certmgr.editcert.trustssl "This certificate can identify web sites.">
+<!ENTITY certmgr.editcert.trustemail "This certificate can identify mail users.">
+<!ENTITY certmgr.editcert.trustobjsign "This certificate can identify software makers.">
+<!ENTITY certmgr.editsslcert.edittrust "Edit certificate trust settings:">
+<!ENTITY certmgr.editsslcert.dotrust "Trust the authenticity of this certificate.">
+<!ENTITY certmgr.editsslcert.donttrust "Do not trust the authenticity of this certificate.">
+<!ENTITY certmgr.editemailcert.title "Edit email certificate trust settings">
+<!ENTITY certmgr.editemailcert.edittrust "Edit certificate trust settings:">
+<!ENTITY certmgr.editemailcert.dotrust "Trust the authenticity of this certificate.">
+<!ENTITY certmgr.editemailcert.donttrust "Do not trust the authenticity of this certificate.">
+
+<!ENTITY certmgr.deletecert.title "Delete Certificate">
+<!ENTITY certmgr.deletecert.beforename "You have requested to delete this certificate:">
+<!ENTITY certmgr.deletecert.aftername "Are you sure you want to delete this certificate?">
+<!ENTITY certmgr.deleteusercert.title "Delete Your Certificate">
+<!ENTITY certmgr.deleteusercert.beforename "You have requested to delete the certificate:">
+<!ENTITY certmgr.deleteusercert.aftername "Once you have deleted this certificate, you will not be able to read mail that has been encrypted with it.">
+
+<!ENTITY certmgr.certname "Certificate Name">
+<!ENTITY certmgr.tokenname "Security Device">
+<!ENTITY certmgr.purpose "Purposes">
+<!ENTITY certmgr.issued "Issued On">
+<!ENTITY certmgr.expires "Expires On">
+<!ENTITY certmgr.email "E-Mail Address">
+<!ENTITY certmgr.serial "Serial Number">
+<!ENTITY certmgr.ocsp_info "Certificates have not been validated with OCSP. Click View to do so.">
+
+<!ENTITY certmgr.close.label "Close">
+<!ENTITY certmgr.view.label "View">
+<!ENTITY certmgr.edit.label "Edit">
+<!ENTITY certmgr.editca.label "Edit CA Trust">
+<!ENTITY certmgr.add.label "Add">
+<!ENTITY certmgr.delete.label "Delete">
+<!ENTITY certmgr.backup.label "Backup">
+<!ENTITY certmgr.backupall.label "Backup All">
+<!ENTITY certmgr.restore.label "Import">
+<!ENTITY certmgr.details.label "Certificate Fields">
+<!ENTITY certmgr.fields.label "Field Value">
+<!ENTITY certmgr.hierarchy.label "Certificate Hierarchy">
+

security/manager/locales/en-US/chrome/pippki/deviceManager.dtd

@@ -0,0 +1,59 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Ian McGreer <mcgreer@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!ENTITY devmgr.title "Device Manager">
+
+<!ENTITY devmgr.devlist.label "Security Modules and Devices">
+<!ENTITY devmgr.details.title "Details">
+<!ENTITY devmgr.details.title2 "Value">
+<!ENTITY devmgr.status.label "Status">
+<!ENTITY devmgr.version.label "Version">
+
+<!ENTITY devmgr.button.changeslotname.label "Change Slot Name">
+<!ENTITY devmgr.button.login.label "Log In">
+<!ENTITY devmgr.button.logout.label "Log Out">
+<!ENTITY devmgr.button.changepw.label "Change Password">
+<!ENTITY devmgr.button.load.label "Load">
+<!ENTITY devmgr.button.unload.label "Unload">
+
+<!ENTITY loaddevice.info "Enter the information for the module you want to add.">
+<!ENTITY loaddevice.modname "Module Name:">
+<!ENTITY loaddevice.modname.default "New PKCS#11 Module">
+<!ENTITY loaddevice.filename "Module filename:">
+<!ENTITY loaddevice.browse "Browse...">
+
+<!ENTITY loaddevice.title "Load PKCS#11 Device">

security/manager/locales/en-US/chrome/pippki/newserver.dtd

@@ -0,0 +1,48 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org Code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corporation.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Javier Delgadillo <javi@netscape.com>
+   -   Bob Lord <lord@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!-- Values for newserver.xul -->
+<!ENTITY newserver.title    "Website Certified by an Unknown Authority">
+<!ENTITY newserver.reasons  "Possible reasons for this error:">
+<!ENTITY newserver.reason1  "- Your browser does not recognize the Certificate Authority that issued the site's certificate.">
+<!ENTITY newserver.reason2  "- The site's certificate is incomplete due to a server misconfiguration.">
+<!ENTITY newserver.notify   "Please notify the site's webmaster about this problem.">
+<!ENTITY newserver.examine  "Examine Certificate...">
+<!ENTITY newserver.remember "Accept this certificate permanently">
+<!ENTITY newserver.session  "Accept this certificate temporarily for this session">
+<!ENTITY newserver.refuse   "Do not accept this certificate and do not connect to this Web site">

security/manager/locales/en-US/chrome/pippki/newserver.properties

@@ -0,0 +1,43 @@
+#
+# ***** BEGIN LICENSE BLOCK *****
+# Version: MPL 1.1/GPL 2.0/LGPL 2.1
+#
+# The contents of this file are subject to the Mozilla Public License Version
+# 1.1 (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+# http://www.mozilla.org/MPL/
+#
+# Software distributed under the License is distributed on an "AS IS" basis,
+# WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+# for the specific language governing rights and limitations under the
+# License.
+#
+# The Original Code is mozilla.org code.
+#
+# The Initial Developer of the Original Code is
+# Netscape Communications Corporation.
+# Portions created by the Initial Developer are Copyright (C) 1998
+# the Initial Developer. All Rights Reserved.
+#
+# Contributor(s):
+#   Javier Delgadillo <javi@netscape.com>
+#   Bob Lord <lord@netscape.com>
+#
+# Alternatively, the contents of this file may be used under the terms of
+# either the GNU General Public License Version 2 or later (the "GPL"), or
+# the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+# in which case the provisions of the GPL or the LGPL are applicable instead
+# of those above. If you wish to allow use of your version of this file only
+# under the terms of either the GPL or the LGPL, and not to allow others to
+# use your version of this file under the terms of the MPL, indicate your
+# decision by deleting the provisions above and replace them with the notice
+# and other provisions required by the GPL or the LGPL. If you do not delete
+# the provisions above, a recipient may use your version of this file under
+# the terms of any one of the MPL, the GPL or the LGPL.
+#
+# ***** END LICENSE BLOCK *****
+
+newserver.intro=Unable to verify the identity of %S as a trusted site.
+# Note that newserver.reason3 should start with "- " as strings reason2 and reason1 in file newserver.dtd
+newserver.reason3=- You are connected to a site pretending to be %S, possibly to obtain your confidential information.
+newserver.question=Before accepting this certificate, you should examine this site's certificate carefully. Are you willing to to accept this certificate for the purpose of identifying the Web site %S?

security/manager/locales/en-US/chrome/pippki/pippki.dtd

@@ -0,0 +1,133 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Terry Hayes <thayes@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!-- Values for changepassword.xul -->
+<!ENTITY setPassword.title  "Change Master Password">
+<!ENTITY setPassword.tokenName.label "Security Device">
+<!ENTITY setPassword.oldPassword.label "Current password:">
+<!ENTITY setPassword.newPassword.label "New password:">
+<!ENTITY setPassword.reenterPassword.label "New password (again):">
+<!ENTITY setPassword.meter.label "Password quality meter">
+<!ENTITY setPassword.meter.loading "Loading">
+
+<!-- Values for resetpassword.xul -->
+<!ENTITY resetPasswordButtonLabel "Reset">
+<!ENTITY resetPassword.title  "Reset Master Password">
+<!ENTITY resetPassword.text  "If you reset your master password, all your stored web and e-mail passwords, form data, personal certificates, and private keys will be forgotten. Are you sure you want to reset your master password?">
+
+<!-- Values for getpassword.xul -->
+<!ENTITY getPassword.title  "Enter Master Password">
+<!ENTITY getPassword.tokenName.label "Security Device">
+<!ENTITY getPassword.password.label "Password:">
+
+<!-- These should be common -->
+<!ENTITY piperror.title "Error">
+<!ENTITY pipalert.title "Error - cannot recover">
+
+<!-- Prefs panel strings -->
+<!ENTITY pref.security.general.lHeader "Security">
+<!ENTITY pref.security.general.rHeader "Settings for general security">
+<!ENTITY pref.security.general.header "Settings for general security">
+<!ENTITY pref.security.general.level.title "Security Level">
+<!ENTITY pref.security.general.paranoid.label "Use paranoid security settings">
+<!ENTITY pref.security.general.certificates.title "Certificates">
+<!ENTITY pref.security.general.manageCert.label "Manage Certificates">
+
+<!-- Downloading a cert -->
+<!ENTITY downloadCert.title "Downloading Certificate">
+<!ENTITY downloadCert.message1 "You have been asked to trust a new Certificate Authority (CA).">
+<!ENTITY downloadCert.trustSSL "Trust this CA to identify web sites.">
+<!ENTITY downloadCert.trustEmail "Trust this CA to identify email users.">
+<!ENTITY downloadCert.trustObjSign "Trust this CA to identify software developers.">
+<!ENTITY downloadCert.message3 "Before trusting this CA for any purpose, you should examine its certificate and its policy and procedures (if available).">
+<!ENTITY downloadCert.viewCert.label "View">
+<!ENTITY downloadCert.viewPolicy.label "Policy">
+<!ENTITY downloadCert.viewCert.text "Examine CA certificate">
+<!ENTITY downloadCert.viewPolicy.text "Examine CA policies and procedures">
+
+<!-- Certificate Exists in database -->
+<!ENTITY caCertExists.title "Certificate Exists">
+<!ENTITY caCertExists.message "The Certificate already exists.">
+
+<!-- Strings for the MismatchDomain dialog  -->
+<!ENTITY domainMismatch.title "Security Error: Domain Name Mismatch">
+<!ENTITY examineCert.label "View Certificate">
+<!ENTITY examineCert.accesskey "V">
+
+<!-- Strings for the Server cert expired dialog  -->
+<!ENTITY serverCertExpired.continue "Would you like to continue anyway?">
+<!ENTITY serverCertExpired.accept.label "Continue">
+
+<!-- Strings for the SSL client auth ask dialog -->
+<!ENTITY clientAuthAsk.title "User Identification Request">
+<!ENTITY clientAuthAsk.message1 "This site has requested that you identify yourself with a certificate:">
+<!ENTITY clientAuthAsk.message2 "Choose a certificate to present as identification:">
+<!ENTITY clientAuthAsk.message3 "Details of selected certificate:">
+
+<!-- Strings for the cert picker dialog -->
+<!ENTITY certPicker.title "Select Certificate">
+<!ENTITY certPicker.info  "Certificate:">
+<!ENTITY certPicker.detailsLabel "Details of selected certificate:">
+
+<!ENTITY pkcs12.setpassword.title  "Choose a Certificate Backup Password">
+<!ENTITY pkcs12.setpassword.message  "The certificate backup password you set here protects the backup file that you are about to create.  You must set this password to proceed with the backup.">
+<!ENTITY pkcs12.setpassword.label1 "Certificate backup password:">
+<!ENTITY pkcs12.setpassword.label2 "Certificate backup password (again):">
+<!ENTITY pkcs12.setpassword.reminder "Important: If you forget your certificate backup password, you will not be able to restore this backup later.  Please record it in a safe location.">
+
+<!ENTITY pkcs12.getpassword.title  "Password Entry Dialog">
+<!ENTITY pkcs12.getpassword.message "Please enter the password that was used to encrypt this certificate backup.">
+
+<!ENTITY chooseToken.title  "Choose Token Dialog">
+<!ENTITY chooseToken.message1 "Please choose a token.">
+
+<!ENTITY escrowWarn.title "Encryption Key Copy">
+<!ENTITY escrowWarn.message1 "Important: This certificate authority has asked to make a backup of your encryption private key.">
+<!ENTITY escrowWarn.benefit1 "The benefit is that if you lose access to your encryption private key, you can request a copy from this certificate authority.">
+<!ENTITY escrowWarn.message2 "However, your encryption private key will be stored by the certificate authority, and could be used to read your encrypted email or documents without your permission.">
+
+<!ENTITY serverCrlNextupdate.message "Please ask your system administrator for assistance">
+
+<!-- Strings for the CreateCertInfo dialog  -->
+<!ENTITY createCertInfo.title "Generating A Private Key">
+<!ENTITY createCertInfo.msg1 "Key Generation in progress... This may take a few minutes....">
+<!ENTITY createCertInfo.msg2 "Please wait...">
+
+<!-- Form Signing confirmation prompt -->
+<!ENTITY formSigning.title "Text Signing Request">
+<!ENTITY formSigning.cert "Signing Certificate">
+<!ENTITY formSigning.confirmPassword "To confirm you agree to sign this text message using your selected certificate, please confirm by entering the master password:">

security/manager/locales/en-US/chrome/pippki/pippki.properties

@@ -0,0 +1,195 @@
+#
+# ***** BEGIN LICENSE BLOCK *****
+# Version: MPL 1.1/GPL 2.0/LGPL 2.1
+#
+# The contents of this file are subject to the Mozilla Public License Version
+# 1.1 (the "License"); you may not use this file except in compliance with
+# the License. You may obtain a copy of the License at
+# http://www.mozilla.org/MPL/
+#
+# Software distributed under the License is distributed on an "AS IS" basis,
+# WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+# for the specific language governing rights and limitations under the
+# License.
+#
+# The Original Code is mozilla.org code.
+#
+# The Initial Developer of the Original Code is
+# Netscape Communications Corporation.
+# Portions created by the Initial Developer are Copyright (C) 1998
+# the Initial Developer. All Rights Reserved.
+#
+# Contributor(s):
+#
+# Alternatively, the contents of this file may be used under the terms of
+# either the GNU General Public License Version 2 or later (the "GPL"), or
+# the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+# in which case the provisions of the GPL or the LGPL are applicable instead
+# of those above. If you wish to allow use of your version of this file only
+# under the terms of either the GPL or the LGPL, and not to allow others to
+# use your version of this file under the terms of the MPL, indicate your
+# decision by deleting the provisions above and replace them with the notice
+# and other provisions required by the GPL or the LGPL. If you do not delete
+# the provisions above, a recipient may use your version of this file under
+# the terms of any one of the MPL, the GPL or the LGPL.
+#
+# ***** END LICENSE BLOCK *****
+
+SignedBy=Signed by %S
+CertPassPrompt=Please enter the Personal Security Password for the PSM Private Keys security device.
+
+#These are for dialogs
+#Download Cert dialog
+newCAMessage1=Do you want to trust "%S" for the following purposes?
+unnamedCA=Certificate Authority (unnamed)
+
+#For editing cert trust
+editTrustWindowTitle=Edit certificate trust
+editTrustCA=The certificate "%S" represents a Certificate Authority.
+editTrustSSL=The certificate "%S" was issued by:
+editTrustEmail=The certificate "%S" was issued by:
+issuerNotTrusted=Because you do not trust the certificate authority that issued this certificate, you do not trust the authenticity of this certificate unless otherwise indicated here.
+issuerTrusted=Because you trust the certificate authority that issued this certificate, you trust the authenticity of this certificate unless otherwise indicated here.
+issuerNotKnown=Because you do not know the certificate authority that issued this certificate, you do not trust the authenticity of this certificate unless otherwise indicated here.
+issuerCertNotFound=Certificate for this certificate authority was not found
+
+#For Deleting Certificates
+deleteSslCertFlag=deleteSslFlag
+deleteSslCertConfirm=Are you sure you want to delete these web site certificates?
+deleteSslCertImpact=If you delete a web site certificate, you will be asked to accept it again the next time you visit the web site.
+deleteSslCertTitle=Delete Web Site Certificates
+
+deleteUserCertFlag=deleteUserFlag
+deleteUserCertConfirm=Are you sure you want to delete these certificates?
+deleteUserCertImpact=If you delete one of your own certificates, you can no longer use it to identify yourself.
+deleteUserCertTitle=Delete your Certificates
+
+deleteCaCertFlag=deleteCaFlag
+deleteCaCertConfirm=Are you sure you want to delete these CA certificates?
+deleteCaCertImpact=If you delete a certificate authority (CA) certificate, your browser will no longer trust any certificates issued by that CA.
+deleteCaCertTitle=Delete CA Certificates
+
+deleteEmailCertFlag=deleteEmailFlag
+deleteEmailCertConfirm=Are you sure you want to delete these people's e-mail certificates?
+deleteEmailCertImpact=If you delete an e-mail certificate, your will no longer be able to send encrypted e-mail to those people.
+deleteEmailCertTitle=Delete E-Mail Certificates
+
+
+#PKCS#12 file dialogs
+chooseP12RestoreFileDialog=File Name to Restore
+chooseP12BackupFileDialog=File Name to Backup
+file_browse_PKCS12_spec=PKCS12 Files
+
+#Mismatch Domain Dialg
+mismatchDomainMsg1=You have attempted to establish a connection with "%S".  However, the security certificate presented belongs to "%S".  It is possible, though unlikely, that someone may be trying to intercept your communication with this web site.
+mismatchDomainMsg2=If you suspect the certificate shown does not belong to "%S", please cancel the connection and notify the site administrator.
+
+#Server Cert expired
+serverCertExpiredMsg1="%S" is a site that uses a security certificate to encrypt data during transmission, but its certificate expired on %S.
+serverCertExpiredTitle=Server Certificate Expired
+serverCertNotYetValedMsg1="%S" is a site that uses a security certificate to encrypt data during transmission, but its certificate will not be valid until %S.
+serverCertNotYetValidTitle=Server Certificate Not Yet Valid
+serverCertExpiredMsg2=You should check to make sure that your computer's time (currently set to %S) is correct.
+
+#Preferences
+resetPreferences=Use this button to reset %S's security preferences to their factory settings.
+
+#Cert verification
+certVerified=This certificate has been verified for the following uses:
+certNotVerified_CertRevoked=Could not verify this certificate because it has been revoked.
+certNotVerified_CertExpired=Could not verify this certificate because it has expired.
+certNotVerified_CertNotTrusted=Could not verify this certificate because it is not trusted.
+certNotVerified_IssuerNotTrusted=Could not verify this certificate because the issuer is not trusted.
+certNotVerified_IssuerUnknown=Could not verify this certificate because the issuer is unknown.
+certNotVerified_CAInvalid=Could not verify this certificate because the CA certificate is invalid.
+certNotVerified_Unknown=Could not verify this certificate for unknown reasons.
+
+#Client auth
+clientAuthMessage1=Organization: "%S"
+clientAuthMessage2=Issued Under: "%S"
+
+#Page Info
+pageInfo_SiteNotVerified=Web Site Identity Not Verified
+pageInfo_WebSiteVerified=Web Site Identity Verified
+pageInfo_Identity_Verified=The web site %S supports authentication for the page you are viewing. The identity of this web site has been verified by %S, a certificate authority you trust for this purpose.
+pageInfo_ViewCertificate=View the security certificate that verifies this web site's identity.
+pageInfo_NoEncryption=Connection Not Encrypted
+pageInfo_Privacy_None1=The web site %S does not support encryption for the page you are viewing.
+pageInfo_Privacy_None2=Information sent over the Internet without encryption can be seen by other people while it is in transit. 
+pageInfo_Privacy_None3=The page you are viewing is not encrypted.
+pageInfo_StrongEncryption=Connection Encrypted: High-grade Encryption (%S %S bit)
+pageInfo_Privacy_Strong1=The page you are viewing was encrypted before being transmitted over the Internet.
+pageInfo_Privacy_Strong2=Encryption makes it very difficult for unauthorized people to view information traveling between computers. It is therefore very unlikely that anyone read this page as it traveled across the network.
+pageInfo_WeakEncryption=Connection Encrypted: Low-grade Encryption (%S %S bit)
+pageInfo_Privacy_Weak1=The web site %S is using low-grade encryption for the page you are viewing.
+pageInfo_Privacy_Weak2=Low-grade encryption may allow some unauthorized people to view this information.
+
+#Cert Viewer
+certDetails=Certificate Viewer:
+notPresent=<Not Part Of Certificate>
+unknownIssuer=<Unknown Issuer>
+
+escrowFinalMessage=You should click OK only if you trust "%S" to protect your encryption private key.
+
+#Token Manager
+password_not_set=(not set)
+failed_pw_change=Unable to change Master Password.
+incorrect_pw=You did not enter the correct current Master Password. Please try again.
+pw_change_ok=Master Password successfully changed.
+pw_erased_ok=Warning! You have deleted your Master Password. 
+pw_not_wanted=Warning! You have decided not to use a Master Password.
+pw_empty_warning=Your stored web and email passwords, form data, and private keys will not be protected.
+pw_change2empty_in_fips_mode=You are currently in FIPS mode. FIPS requires a non-empty Master Password.
+login_failed=Failed to Login
+loadPK11TokenDialog=Choose a PKCS#11 device to load
+devinfo_modname=Module
+devinfo_modpath=Path
+devinfo_label=Label
+devinfo_manID=Manufacturer
+devinfo_serialnum=Serial Number
+devinfo_hwversion=HW Version
+devinfo_fwversion=FW Version
+devinfo_status=Status
+devinfo_desc=Description
+devinfo_stat_disabled=Disabled
+devinfo_stat_notpresent=Not Present
+devinfo_stat_uninitialized=Uninitialized
+devinfo_stat_notloggedin=Not Logged In
+devinfo_stat_loggedin=Logged In
+devinfo_stat_ready=Ready
+enable_fips=Enable FIPS
+disable_fips=Disable FIPS
+fips_nonempty_password_required=FIPS mode requires that you have a Master Password set for each security device. Please set the password before trying to enable FIPS mode.
+
+# CRL next update.
+crlNextUpdateMsg1=%S cannot establish an encrypted connection with "%S".
+crlNextUpdateMsg2=The certificate revocation list (CRL) from "%S" needs to be updated.
+NoUpdateFailure=None
+lastFetchUrlLabel=URL originally fetched from
+advertisedUrlLabel=URL advertised by the CA
+CrlUpdatePrefsSetConfirmation = Automatic update preferences will take effect when you restart the browser.
+crlAutoUpdateDayCntError=Number of days before next update must be a number greater than zero.
+crlAutoUpdtaeFreqCntError=Frequency of update must be a number greater than zero.
+disabledStatement=Automatic Update is not enabled for this CRL.
+enabledStatement=Automatic Update is enabled for this CRL.
+crlAutoupdateQuestion1=Would would like to enable automatic update?
+crlAutoupdateQuestion2=Would would like to view the automatic update settings?
+undefinedValStr=<Not Defined>
+undefinedURL=Auto update URL is not defined.
+yesButton=Yes
+noButton=No
+resetPasswordConfirmationTitle=Reset Master Password
+resetPasswordConfirmationMessage=Your password has been reset.
+crlAutoupdateEnabled=Enabled
+crlAutoupdateNotEnabled=Not Enabled
+crlAutoupdateOk=OK
+crlAutoupdateFailed=Failed
+
+#Import certificate(s) file dialog
+importEmailCertPrompt=Select File containing somebody's Email certificate to import
+importCACertsPrompt=Select File containing CA certificate(s) to import
+importWebSiteCertPrompt=Select File containing Web Site certificate to import
+file_browse_Certificate_spec=Certificate Files
+
+# Form Signing confirmation prompt
+formSigningIntro=The site '%S' has requested that you sign the following text message:

security/manager/locales/en-US/chrome/pippki/pref-masterpass.dtd

@@ -0,0 +1,55 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Bob Lord <lord@netscape.com>
+   -   Terry Hayes <thayes@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!ENTITY  lheader    "Master Passwords">
+<!ENTITY  managepassword.label    "Master Password Timeout">
+<!ENTITY  managepassword.text     "&brandShortName; will ask for your master password:">
+<!ENTITY  managepassword.askfirsttime "The first time it is needed">
+<!ENTITY  managepassword.askeverytime "Every time it is needed">
+<!ENTITY  managepassword.asktimeout   "If it has not been used for ">
+<!ENTITY  managepassword.timeout.unit   "minutes or longer">
+
+<!ENTITY  changepassword.label    "Change Master Password">
+<!ENTITY  changepassword.text     "Your master password protects sensitive information such as web passwords and certificates.">
+<!ENTITY  changepassword.button   "Change Password...">
+<!ENTITY  changepassword.accesskey  "C">
+
+<!ENTITY  resetpassword.label    "Reset Master Password">
+<!ENTITY  resetpassword.text     "If you reset your master password, all of your stored Web and e-mail passwords, form data, personal certificates, and private keys will be lost.">
+<!ENTITY  resetpassword.button   "Reset Password">
+<!ENTITY  resetpassword.accesskey   "R">

security/manager/locales/en-US/chrome/pippki/pref-security.dtd

@@ -0,0 +1,57 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Bob Lord <lord@netscape.com>
+   -   Terry Hayes <thayes@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!ENTITY  security.title         "Security Preferences">
+<!ENTITY  security.label         "Privacy and Security">
+<!ENTITY  security.description   "Settings for Privacy and Security">
+
+<!ENTITY  resetsettings.label    "Reset Settings">
+<!ENTITY  resetpreferences.label "Reset Preferences...">
+<!ENTITY  managecerts.label      "Manage Certificates">
+<!ENTITY  managecerts.text       "Use the Certificate Manager to manage your personal certificates, as well as those of other people and certificate authorities.">
+<!ENTITY  managecerts.button     "Manage Certificates...">
+<!ENTITY  managecerts.accesskey  "M">
+<!ENTITY  managedevices.label    "Manage Security Devices">
+<!ENTITY  managedevices.text     "Use this button to manage your security devices, such as smart cards.">
+<!ENTITY  managedevices.button   "Manage Security Devices...">
+<!ENTITY  managedevices.accesskey   "S">
+
+<!ENTITY  ssl.label              "SSL">
+
+<!ENTITY  certs.title            "Certificates">
+<!ENTITY  certs.label            "Certificates">

security/manager/locales/en-US/chrome/pippki/pref-ssl.dtd

@@ -0,0 +1,121 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Bob Lord <lord@netscape.com>
+   -   Terry Hayes <thayes@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!ENTITY  SSLProtocolVersions          "SSL Protocol Versions">
+<!ENTITY  SSLWarnings                  "SSL Warnings">
+<!ENTITY  SSLClientAuthMethod          "Client Certificate Selection">
+
+<!ENTITY prefheader.title "Secure Sockets Layer (SSL)">
+<!ENTITY enable.ssl2 "Enable SSL version 2">
+<!ENTITY enable.ssl3 "Enable SSL version 3">
+<!ENTITY enable.tls "Enable TLS">
+
+<!ENTITY edit.sslciphers "Edit Ciphers...">
+<!ENTITY edit.sslciphers.accesskey "E">
+
+<!ENTITY warn.description "&brandShortName; can alert you to the security status of the web page you are viewing. Set &brandShortName; to show a warning and ask permission before:">
+<!ENTITY warn.enteringsecure "Loading a page that supports encryption">
+<!ENTITY warn.enteringweak "Loading a page that uses low-grade encryption">
+<!ENTITY warn.insecurepost "Sending form data from an unencrypted page to an unencrypted page">
+<!ENTITY warn.leavingsecure "Leaving a page that supports encryption">
+<!ENTITY warn.secureredirect "Redirecting from one encrypted page to another">
+<!ENTITY warn.secureredirecttoinsecure "Redirecting from an encrypted page to an unencrypted page">
+<!ENTITY warn.viewmixed "Viewing a page with an encrypted/unencrypted mix">
+
+<!ENTITY certselect.description "Decide how &brandShortName; selects a security certificate to present to web sites that require one:">
+<!ENTITY certselect.auto "Select Automatically">
+<!ENTITY certselect.ask "Ask Every Time">
+
+<!-- Cipher pref window -->
+<!ENTITY cipher.title "SSL: Edit Ciphers">
+<!ENTITY cipher.ssl2.label "SSL2 Cipher Suites">
+<!ENTITY cipher.ssl3.label "SSL3/TLS Cipher Suites">
+<!ENTITY cipher.ssl3_extra.label "Extra SSL3/TLS Cipher Suites">
+<!ENTITY cipher.tab.ssl2 "SSL2">
+<!ENTITY cipher.tab.ssl3tls "SSL3/TLS">
+<!ENTITY cipher.tab.ssl3tls_extra "Extra SSL3/TLS">
+
+<!-- SSL2 Ciphers -->
+
+<!ENTITY cipher.ssl2.rc4_128 "128-bit RC4 encryption with RSA and an MD5 MAC">
+<!ENTITY cipher.ssl2.rc2_128 "128-bit RC2 encryption with RSA and an MD5 MAC">
+<!ENTITY cipher.ssl2.des_ede3_192 "168-bit Triple DES encryption with RSA and MD5 MAC ">
+<!ENTITY cipher.ssl2.des_64 "56-bit DES encryption with RSA and an MD5 MAC">
+<!ENTITY cipher.ssl2.rc4_40 "40-bit RC4 encryption with RSA and an MD5 MAC (export)">
+<!ENTITY cipher.ssl2.rc2_40 "40-bit RC2 encryption with RSA and an MD5 MAC (export)">
+
+<!-- SSL3/TLS ciphers -->
+<!ENTITY cipher.ssl3.rsa_rc4_128_md5 "128-bit RC4 encryption with RSA and an MD5 MAC">
+<!ENTITY cipher.ssl3.rsa_rc4_128_sha "128-bit RC4 encryption with RSA and a SHA1 MAC">
+<!ENTITY cipher.ssl3.rsa_fips_des_ede3_sha "168-bit Triple DES with RSA and a SHA1 MAC (FIPS)">
+<!ENTITY cipher.ssl3.rsa_des_ede3_sha "168-bit Triple DES with RSA and a SHA1 MAC">
+<!ENTITY cipher.ssl3.rsa_fips_des_sha "56-bit DES encryption with RSA and a SHA1 MAC (FIPS)">
+<!ENTITY cipher.ssl3.rsa_des_sha "56-bit DES encryption with RSA and a SHA1 MAC">
+<!ENTITY cipher.ssl3.rsa_1024_rc4_56_sha "56-bit RC4 encryption with RSA and a SHA1 MAC (export)">
+<!ENTITY cipher.ssl3.rsa_1024_des_cbc_sha "56-bit DES encryption with RSA and a SHA1 MAC (export)">
+<!ENTITY cipher.ssl3.rsa_rc4_40_md5 "40-bit RC4 encryption with RSA and an MD5 MAC (export)">
+<!ENTITY cipher.ssl3.rsa_rc2_40_md5 "40-bit RC2 encryption with RSA and an MD5 MAC (export)">
+
+<!-- Extra SSL3/TLS ciphers -->
+<!ENTITY cipher.ssl3.dhe_rsa_aes_256_sha "256-bit AES encryption with RSA, DHE, and a SHA1 MAC">
+<!ENTITY cipher.ssl3.dhe_dss_aes_256_sha "256-bit AES encryption with DSA, DHE, and a SHA1 MAC">
+<!ENTITY cipher.ssl3.rsa_aes_256_sha "256-bit AES encryption with RSA and a SHA1 MAC">
+<!ENTITY cipher.ssl3.dhe_rsa_aes_128_sha "128-bit AES encryption with RSA, DHE, and a SHA1 MAC">
+<!ENTITY cipher.ssl3.dhe_dss_aes_128_sha "128-bit AES encryption with DSA, DHE, and a SHA1 MAC">
+<!ENTITY cipher.ssl3.rsa_aes_128_sha "128-bit AES encryption with RSA and a SHA1 MAC">
+<!ENTITY cipher.ssl3.dhe_rsa_des_ede3_sha "168-bit Triple DES with RSA, DHE, and a SHA1 MAC">
+<!ENTITY cipher.ssl3.dhe_dss_des_ede3_sha "168-bit Triple DES with DSA, DHE, and a SHA1 MAC">
+<!ENTITY cipher.ssl3.dhe_rsa_des_sha "56-bit DES encryption with RSA, DHE, and a SHA1 MAC">
+<!ENTITY cipher.ssl3.dhe_dss_des_sha "56-bit DES encryption with DSA, DHE, and a SHA1 MAC">
+<!ENTITY cipher.ssl3.rsa_null_sha "No encryption with RSA authentication and a SHA1 MAC">
+<!ENTITY cipher.ssl3.rsa_null_md5 "No encryption with RSA authentication and an MD5 MAC">
+
+<!-- Labels for cipher attributes -->
+<!ENTITY cipher.name "Cipher">
+<!ENTITY cipher.encryption "Encryption Algorithm:">
+<!ENTITY cipher.authAlg "Authentication Algorithm:">
+<!ENTITY cipher.keyAlg "Key Algorithm:">
+<!ENTITY cipher.keySize "Effective Key Size:">
+<!ENTITY cipher.macAlg "MAC Algorithm:">
+<!ENTITY cipher.other "Other Attributes:">
+<!ENTITY cipher.fips "FIPS">
+<!ENTITY cipher.exportable "IsExportable">
+
+<!ENTITY cipher.details "Details...">
+
+<!ENTITY cipherinfo.title "Cipher Details">

security/manager/locales/en-US/chrome/pippki/pref-validation.dtd

@@ -0,0 +1,79 @@
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   David P. Drinan (ddrinan@netscape.com)
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<!ENTITY  validation.title          "Validation">
+
+<!ENTITY  validation.crl.label      "CRL">
+<!ENTITY  validation.crl.description "Use the CRL Manager to manage the Certificate Revocation Lists (CRL) that are stored in your certificate database.">
+<!ENTITY  validation.managecrls.button      "Manage CRLs...">
+<!ENTITY  validation.managecrls.accesskey   "M">
+<!ENTITY  validation.crlmanager.label       "Manage CRLs">
+<!ENTITY  validation.crlname.label          "Name">
+<!ENTITY  validation.crllastupdate.label    "Last Update">
+<!ENTITY  validation.crlnextupdate.label    "Next Update">
+<!ENTITY  validation.crlautoupdateenabled.label   "Auto Update">
+<!ENTITY  validation.crlautoupdatestatus.label    "Auto Update Status">
+<!ENTITY  validation.deletecrl.label        "Delete">
+<!ENTITY  validation.updatecrl.label        "Update">
+<!ENTITY  validation.advanced.label         "Settings">
+
+<!ENTITY  validation.crl.autoupdate.title            "Automatic CRL Update Preferences">
+<!ENTITY  validation.crl.autoupdate.enable.label     "Enable Automatic Update for this CRL">
+<!ENTITY  validation.crl.autoupdate.time.label1      "Update">
+<!ENTITY  validation.crl.autoupdate.time.label2      "Day(s) before Next Update date">
+<!ENTITY  validation.crl.autoupdate.freq.label1      "Update every">
+<!ENTITY  validation.crl.autoupdate.freq.label2      "Day(s)">
+<!ENTITY  validation.crl.autoupdate.url.label        "CRL would be imported From:">
+<!ENTITY  crl.import.status.title         "CRL Import Status">
+<!ENTITY  crl.import.success.message      "The Certificate Revocation List (CRL) was successfully imported.">
+<!ENTITY  crl.issuer.label                "CRL Issued By:">
+<!ENTITY  crl.issuer.org.label            "Organization: ">
+<!ENTITY  crl.issuer.orgunit.label        "Unit: ">
+<!ENTITY  crl.import.nextupdate.label     "Next Update On: ">
+<!ENTITY  crl.autoupdate.fail.cnt.label      "Previous Consecutive Update Failures: ">
+<!ENTITY  crl.autoupdate.fail.reason.label   "Details of Last Update Failure: ">
+<!ENTITY  edit.button      "Settings">
+
+<!ENTITY validation.ocsp.label      "OCSP">
+<!ENTITY validation.ocsp.description "&brandShortName; can use Online Certificate Status Protocol (OCSP) to verify certificates. Set &brandShortName; to use OCSP as follows:">
+<!ENTITY disableOCSP.label "Do not use OCSP for certificate validation">
+<!ENTITY certOCSP.label "Use OCSP to validate only certificates that specify an OCSP service URL">
+<!ENTITY proxyOCSP.label "Use OCSP to validate all certificates using this URL and signer:">
+<!ENTITY serviceURL.label "Service URL:">
+<!ENTITY serviceURL.accesskey "S">
+<!ENTITY signingCA.label "Response Signer:">
+<!ENTITY signingCA.accesskey "R">

security/manager/locales/generic/chrome/pipnss/contents.rdf

@@ -0,0 +1,27 @@
+<?xml version="1.0"?>
+
+#filter substitution
+
+<RDF:RDF xmlns:RDF="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+         xmlns:chrome="http://www.mozilla.org/rdf/chrome#">
+
+  <!-- list all the locales being supplied by this jar -->
+  <RDF:Seq about="urn:mozilla:locale:root">
+    <RDF:li resource="urn:mozilla:locale:@AB_CD@"/>
+  </RDF:Seq>
+
+  <!-- locale information -->
+  <RDF:Description about="urn:mozilla:locale:@AB_CD@"
+        chrome:name="@AB_CD@">
+    <chrome:packages>
+      <RDF:Seq about="urn:mozilla:locale:@AB_CD@:packages">
+        <RDF:li resource="urn:mozilla:locale:@AB_CD@:pipnss"/>
+      </RDF:Seq>
+    </chrome:packages>
+  </RDF:Description>
+
+  <!-- Version Information.  State that we work only with major version of this
+       package. -->
+  <RDF:Description about="urn:mozilla:locale:@AB_CD@:pipnss"
+	 	chrome:localeVersion="@MOZILLA_LOCALE_VERSION@"/>
+</RDF:RDF>

security/manager/locales/generic/chrome/pippki/contents.rdf

@@ -0,0 +1,64 @@
+<?xml version="1.0"?>
+
+#filter substitution
+
+<!-- ***** BEGIN LICENSE BLOCK *****
+   - Version: MPL 1.1/GPL 2.0/LGPL 2.1
+   -
+   - The contents of this file are subject to the Mozilla Public License Version
+   - 1.1 (the "License"); you may not use this file except in compliance with
+   - the License. You may obtain a copy of the License at
+   - http://www.mozilla.org/MPL/
+   -
+   - Software distributed under the License is distributed on an "AS IS" basis,
+   - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
+   - for the specific language governing rights and limitations under the
+   - License.
+   -
+   - The Original Code is mozilla.org code.
+   -
+   - The Initial Developer of the Original Code is
+   - Netscape Communications Corp.
+   - Portions created by the Initial Developer are Copyright (C) 2001
+   - the Initial Developer. All Rights Reserved.
+   -
+   - Contributor(s):
+   -   Terry Hayes <thayes@netscape.com>
+   -
+   - Alternatively, the contents of this file may be used under the terms of
+   - either the GNU General Public License Version 2 or later (the "GPL"), or
+   - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+   - in which case the provisions of the GPL or the LGPL are applicable instead
+   - of those above. If you wish to allow use of your version of this file only
+   - under the terms of either the GPL or the LGPL, and not to allow others to
+   - use your version of this file under the terms of the MPL, indicate your
+   - decision by deleting the provisions above and replace them with the notice
+   - and other provisions required by the GPL or the LGPL. If you do not delete
+   - the provisions above, a recipient may use your version of this file under
+   - the terms of any one of the MPL, the GPL or the LGPL.
+   -
+   - ***** END LICENSE BLOCK ***** -->
+
+<RDF:RDF xmlns:RDF="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+         xmlns:chrome="http://www.mozilla.org/rdf/chrome#">
+
+  <!-- list all the locales being supplied by this jar -->
+  <RDF:Seq about="urn:mozilla:locale:root">
+    <RDF:li resource="urn:mozilla:locale:@AB_CD@"/>
+  </RDF:Seq>
+
+  <!-- locale information -->
+  <RDF:Description about="urn:mozilla:locale:@AB_CD@"
+        chrome:name="@AB_CD@">
+    <chrome:packages>
+      <RDF:Seq about="urn:mozilla:locale:@AB_CD@:packages">
+        <RDF:li resource="urn:mozilla:locale:@AB_CD@:pippki"/>
+      </RDF:Seq>
+    </chrome:packages>
+  </RDF:Description>
+
+  <!-- Version Information.  State that we work only with major version of this
+       package. -->
+  <RDF:Description about="urn:mozilla:locale:@AB_CD@:pippki"
+	 	chrome:localeVersion="@MOZILLA_LOCALE_VERSION@"/>
+</RDF:RDF>

security/manager/locales/jar.mn

@@ -0,0 +1,19 @@
+#filter substitution
+
+@AB_CD@.jar:
+* locale/@AB_CD@/pipnss/contents.rdf          (generic/chrome/pipnss/contents.rdf)
+  locale/@AB_CD@/pipnss/pipnss.properties     (%chrome/pipnss/pipnss.properties)
+  locale/@AB_CD@/pipnss/security.properties   (%chrome/pipnss/security.properties)
+* locale/@AB_CD@/pippki/contents.rdf          (generic/chrome/pippki/contents.rdf)
+  locale/@AB_CD@/pippki/pippki.dtd            (%chrome/pippki/pippki.dtd)
+  locale/@AB_CD@/pippki/pref-ssl.dtd          (%chrome/pippki/pref-ssl.dtd)
+  locale/@AB_CD@/pippki/pippki.properties     (%chrome/pippki/pippki.properties)
+  locale/@AB_CD@/pippki/PrefOverlay.dtd       (%chrome/pippki/PrefOverlay.dtd)
+  locale/@AB_CD@/pippki/newserver.properties  (%chrome/pippki/newserver.properties)
+  locale/@AB_CD@/pippki/newserver.dtd         (%chrome/pippki/newserver.dtd)
+  locale/@AB_CD@/pippki/pref-security.dtd     (%chrome/pippki/pref-security.dtd)
+  locale/@AB_CD@/pippki/PageInfoOverlay.dtd   (%chrome/pippki/PageInfoOverlay.dtd)
+  locale/@AB_CD@/pippki/certManager.dtd       (%chrome/pippki/certManager.dtd)
+  locale/@AB_CD@/pippki/deviceManager.dtd     (%chrome/pippki/deviceManager.dtd)
+  locale/@AB_CD@/pippki/pref-validation.dtd   (%chrome/pippki/pref-validation.dtd)
+  locale/@AB_CD@/pippki/pref-masterpass.dtd   (%chrome/pippki/pref-masterpass.dtd)

security/manager/pki/resources/jar.mn

@@ -72,18 +72,3 @@ pippki.jar:
     content/pippki/pref-crlupdate.js         (content/pref-crlupdate.js)
     content/pippki/formsigning.xul           (content/formsigning.xul)
     content/pippki/formsigning.js            (content/formsigning.js)
-
-en-US.jar:
-*   locale/en-US/pippki/contents.rdf         (locale/en-US/contents.rdf)
-    locale/en-US/pippki/pippki.dtd           (locale/en-US/pippki.dtd)
-    locale/en-US/pippki/pref-ssl.dtd         (locale/en-US/pref-ssl.dtd)
-    locale/en-US/pippki/pippki.properties    (locale/en-US/pippki.properties)
-    locale/en-US/pippki/PrefOverlay.dtd      (locale/en-US/PrefOverlay.dtd)
-    locale/en-US/pippki/newserver.properties (locale/en-US/newserver.properties)
-    locale/en-US/pippki/newserver.dtd        (locale/en-US/newserver.dtd)
-    locale/en-US/pippki/pref-security.dtd    (locale/en-US/pref-security.dtd)
-    locale/en-US/pippki/PageInfoOverlay.dtd  (locale/en-US/PageInfoOverlay.dtd)
-    locale/en-US/pippki/certManager.dtd      (locale/en-US/certManager.dtd)
-    locale/en-US/pippki/deviceManager.dtd    (locale/en-US/deviceManager.dtd)
-    locale/en-US/pippki/pref-validation.dtd  (locale/en-US/pref-validation.dtd)
-    locale/en-US/pippki/pref-masterpass.dtd  (locale/en-US/pref-masterpass.dtd)

security/manager/ssl/resources/jar.mn

@@ -1,7 +1,2 @@
 pipnss.jar:
 *   content/pipnss/contents.rdf             (content/contents.rdf)
-
-en-US.jar:
-*   locale/en-US/pipnss/contents.rdf        (locale/en-US/contents.rdf)
-    locale/en-US/pipnss/pipnss.properties   (locale/en-US/pipnss.properties)
-    locale/en-US/pipnss/security.properties (locale/en-US/security.properties)