NSS 3.9.12 core-dump in SSL_OptionGet

2011-04-20 Thread Bernhard Thalmayr
Hi experts, it would be great if some could shed some light on the following OpenAM web-agents are using NSS/NSPR for outbound connections. I get a core-dump of Apache http server when agent is doing outound ssl-connection on Solaris 10 SPARC (32bit-apache httpd and nss) pstack shows

Importing client SSL certificate onto external PKCS#11 token

2011-04-20 Thread james07
Hi, I have added an external PKCS#11 token via Device Manager in Firefox 3.6.15. I then import a PKCS#12 file containing a client SSL key and certificate signed by a trusted CA, specifying the external token as the key and certificate store. The import is successful however when I attempt to

Re: NSS 3.9.12 core-dump in SSL_OptionGet

2011-04-20 Thread Wan-Teh Chang
On Wed, Apr 20, 2011 at 3:27 AM, Bernhard Thalmayr bernhard.thalm...@painstakingminds.com wrote: Hi experts, it would be great if some could shed some light on the following OpenAM web-agents are using NSS/NSPR for outbound connections. I get a core-dump of Apache http server when agent

Re: NSS 3.9.12 core-dump in SSL_OptionGet

2011-04-20 Thread Bernhard Thalmayr
Thanks for the pointer Wan-Teh meanwhile I already used dbx and got this ... Current function is SSL_OptionGet 809 *pOn = on; current thread: t@1 =[1] SSL_OptionGet(fd = 0x135d48, which = 1, pOn = 0xffbfe7df), line 809 in sslsock.c [2] smi::Connection::secureSocket(0xffbff09c,

Re: NSS 3.9.12 core-dump in SSL_OptionGet

2011-04-20 Thread Wan-Teh Chang
On Wed, Apr 20, 2011 at 7:46 AM, Bernhard Thalmayr bernhard.thalm...@painstakingminds.com wrote: Thanks for the pointer Wan-Teh meanwhile I already used dbx and got this ... You're right. I haven't used Solaris for a long time. If you compile the code with Sun Studio compilers, you should

Re: NSS 3.9.12 core-dump in SSL_OptionGet

2011-04-20 Thread Bernhard Thalmayr
Thanks again Wan-Teh, I'm just trying to build the agent with Sun Studio .. unfortunately it's not that easy as building NSS. Rgds, Bernhard On 04/20/2011 05:01 PM, Wan-Teh Chang wrote: On Wed, Apr 20, 2011 at 7:46 AM, Bernhard Thalmayr bernhard.thalm...@painstakingminds.com wrote: Thanks

Re: Importing client SSL certificate onto external PKCS#11 token

2011-04-20 Thread Robert Relyea
On 04/20/2011 06:00 AM, james07 wrote: Hi, I have added an external PKCS#11 token via Device Manager in Firefox 3.6.15. I then import a PKCS#12 file containing a client SSL key and certificate signed by a trusted CA, specifying the external token as the key and certificate store. The import