Re: pkcs11 and pkcs7 to sign a document

[Welington B. Souza]

Hi Nelson

I need something like this link 
https://developer.rsasecurity.com/samples/?view=671, therefore I want a 
open source solution.

source code!

Have you any idea? where I can get somethink like it?

[]s, Welington B. Souza

Nelson Bolyard wrote:
Welington B. Souza wrote:

I am working in a project, and it need to use digital certification. 
Using the library opensc-pkcs11.dll I obtained to read the 
certificates, to sign and to verify the signature using pkcs11.  
However é necessary to sign using pkcs7, but searching the data of 
the digital certificate in the token (smart card).  I tried several 
times without success to generate an envelope pkcs7 with OpenSSL 
using smart card to sign :(

I tried to use the NSS,  but I it do not compile with my compiler. I 
am using Borland C++ Builder.  I have a good skill of Java 
techologies and a litle of C++.

It would like a small example that made this, using a DLL.

If somebody will be able to help would be very been thankful me.


Do you have a PKCS 11 software module for your token?
If so, and if your cert and key are properly formed, you should be
able to send and receive all the signed and/or encrypted CMS messages
you want using mozilla.
First step, register your PKCS11 module with mozilla browser.
Edit-Preferences
Under Privacy  Security, choose Certificates, then bonk the
Manage Security Devices button.
In the Device Manager window that opens, click the Load button.
In the Load PKCS#11 Device dialog, enter a name for your module,
and the file pathname for your PKCS11 module DLL.  Click OK.
Your module sohuld appear in the device manager.
You should be able to select it and Log in to your device.
Please post any follow up messages in netscape.public.mozilla.crypto

___
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto

Invalid certificate alert

[Henrik Gemal]

I'm having problem accessing sites where I have to present my digital 
signature.

I'm getting the error that's attached.

I have no idea what it means. And the text in the alert box isn't clear 
enough.

Is it a problem with my certificate or the server?

--
Henrik Gemal
Mozilla Evangelist
Mozilla Blog with news, devinfo, links, etc:
http://gemal.dk
inline: certalert.png

Re: Invalid certificate alert

[Julien Pierre]

Henrik,

I thought the message made it quite clear that it is a problem with the 
server. There could be a lot of reasons for this, but the main one is 
somebody is trying to play CA and does not know the rules of PKI. They 
may have issued multiple server certs with the same serial number, or 
even your client cert with the same serial number as their server cert. 
That's not legal and that's why Mozilla tells you. You need to contact 
the server administrator as instructed. We have a bug in bugzilla that 
explain this in more detail, but I can't recall the number right now.

Henrik Gemal wrote:
I'm having problem accessing sites where I have to present my digital 
signature.

I'm getting the error that's attached.

I have no idea what it means. And the text in the alert box isn't clear 
enough.

Is it a problem with my certificate or the server?



___
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto