Re: Accessing Firefox keystore

2015-01-09 Thread Robert Relyea
On 01/09/2015 08:03 AM, Opa114 wrote: i do. but i want to parse the cert8.db or maybe access this fle in an easier way with JAVA. i have to read the file and maybe i have to remove and/or add new certificate to it. While there is some documentation on the format of cert8.db, If you are

Problems with python-nss get_cert_nicknames

2015-01-09 Thread Roger Dunn
I need to enumerate the certs in my local store, and in my testing, only user certs can be enumerated using the get_cert_nicknames api. It also appears to be the only exposed api for listing certs in the db. I'm using the ver 0.12 version of python-nss. The function get_cert_nicknames takes a

Re: Accessing Firefox keystore

2015-01-09 Thread Opa114
i do. but i want to parse the cert8.db or maybe access this fle in an easier way with JAVA. i have to read the file and maybe i have to remove and/or add new certificate to it. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Accessing Firefox keystore

2015-01-09 Thread helpcrypto helpcrypto
On Thu, Jan 8, 2015 at 11:19 PM, Robert Relyea rrel...@redhat.com wrote: On 12/11/2014 12:33 AM, helpcrypto helpcrypto wrote: Hi again, sorry for delay. Yes, you can (SHOULD) use SunPKCS#11 to access directly the libraries/modules. You can do it two ways: - attack libraries directly

Re: Problems with python-nss get_cert_nicknames

2015-01-09 Thread John Dennis
On 01/09/2015 08:07 AM, Roger Dunn wrote: I need to enumerate the certs in my local store, and in my testing, only user certs can be enumerated using the get_cert_nicknames api. It also appears to be the only exposed api for listing certs in the db. I'm using the ver 0.12 version of

Re: Problems with python-nss get_cert_nicknames

2015-01-09 Thread Roger Dunn
On Friday, January 9, 2015 at 1:36:51 PM UTC-5, John Dennis wrote: On 01/09/2015 08:07 AM, Roger Dunn wrote: I need to enumerate the certs in my local store, and in my testing, only user certs can be enumerated using the get_cert_nicknames api. It also appears to be the only exposed api for

Re: Accessing Firefox keystore

2015-01-09 Thread Opa114
could you give me a little example or hint how to parse the secmod.db? so that i can try t access the cert8.db with SunPKCS#11? i tried the code posted from above (DBHash.java), too. it reads out the cert8.db- but how can i convert the data i received into a x509 certificate? for example an

Re: Accessing Firefox keystore

2015-01-09 Thread helpcrypto helpcrypto
I'm parsing secmod.db, not cert8.db. If you plan to parse cert8.db I suggest you have a look on certutil source. https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Reference/NSS_tools_:_certutil Regards On Fri, Jan 9, 2015 at 12:04 PM, Opa114 opa...@gmail.com wrote: could you give

Re: Accessing Firefox keystore

2015-01-09 Thread Opa114
could you give me a little example or hint how to parse the secmod.db? so that i can try t access the cert8.db with SunPKCS#11? i tried the code posted from above (DBHash.java), too. it reads out the cert8.db- but how can i convert the data i received into a x509 certificate? for example an