Re: Accessing Firefox keystore

2015-01-15 Thread helpcrypto helpcrypto
Didn't, just telling you what's in there. I just need/use personal, hence softokn is enough for me. On Wed, Jan 14, 2015 at 11:58 PM, Opa114 opa...@gmail.com wrote: - People (personal without related private key) -- how did you get this? -- dev-tech-crypto mailing list

Re: Accessing Firefox keystore

2015-01-14 Thread Opa114
in the secmod.java it checks the Version of NSS: private void fetchVersions() { supported = nssVersionCheck(nssHandle, 3.7); } But the NSS Version i copied from Mozilla-Folder has verson 3.17.2.0. But this error message seems to be that there are problems with the version. --

Re: Accessing Firefox keystore

2015-01-14 Thread Opa114
- People (personal without related private key) -- how did you get this? -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Accessing Firefox keystore

2015-01-14 Thread Opa114
Am Mittwoch, 14. Januar 2015 20:30:41 UTC+1 schrieb Opa114: in the secmod.java it checks the Version of NSS: private void fetchVersions() { supported = nssVersionCheck(nssHandle, 3.7); } But the NSS Version i copied from Mozilla-Folder has verson 3.17.2.0. But this error message

Re: Accessing Firefox keystore

2015-01-14 Thread Opa114
i tried it now with JSS and there i could access the Trusted Root CAs and the own certificates. i could remove them, too. now i have to check if i could read the other certificates like Persons, other and root. and i have to check exactly what certificates i get when i call the

Re: Accessing Firefox keystore

2015-01-14 Thread Opa114
i played a little bit with my JSS-Code. it shows me all Certificates fromm all Tabs in the Firefox Builtin Certificate-Manager. But JSS seems to be very buggy. First i read out 183 Certificates. After i removed one certificate and i run the list certificates again it shows me 190 certificates.

Re: Accessing Firefox keystore

2015-01-14 Thread helpcrypto helpcrypto
Hi Matthias As stated in [1] you should use nssModule=trustanchors I have tried: String config = name = NSS\r\n nssLibraryDirectory = + tmpDirName + \r\n nssSecmodDirectory = + profile.replace(\\, /) + \r\n nssDbMode = readOnly\r\n nssModule = trustanchors\r\n attributes =

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
Thats your mistake: Using softokn+slot=2 will access your personal/installed certificates, not CA/trusted ones. Perhaps slot 1 will do, but I have never tried. On Tue, Jan 13, 2015 at 5:19 PM, Opa114 opa...@gmail.com wrote: i mean the Server and CA not only own Certificates --

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
Am Dienstag, 13. Januar 2015 19:04:28 UTC+1 schrieb helpcrypto helpcrypto: Thats your mistake: Using softokn+slot=2 will access your personal/installed certificates, not CA/trusted ones. Perhaps slot 1 will do, but I have never tried. On Tue, Jan 13, 2015 at 5:19 PM, Opa114

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
On Tue, Jan 13, 2015 at 7:18 PM, Opa114 opa...@gmail.com wrote: Am Dienstag, 13. Januar 2015 19:04:28 UTC+1 schrieb helpcrypto helpcrypto: Thats your mistake: Using softokn+slot=2 will access your personal/installed certificates, not CA/trusted ones. Perhaps slot 1 will do, but I have

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
the link to Oracle Docu did not contain detailed information to all the arguments. yes, Personal works. a way without certutil os not possible? -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
Hi Again Matthias Copy softkn+dependencies to %temp%, load libraries in Java using System.load (also in order!) and then try to use sunpkcs11 with the following config: String config = name = NSS\r\n + library = + path + \r\n + attributes = compatibility\r\n + showInfo = false\r\n +

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
thanks again. i have compared my code woth your peace of code you posted and i have the same. But i still get the Error: CKR_DEVICE_ERROR i loaded the dll's in your posted order. i copied the dll's to C:\users\myname\AppData\Local\Temp Folder. the Mozilla Profile folder is right, too. so don't

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
Am Dienstag, 13. Januar 2015 12:14:28 UTC+1 schrieb helpcrypto helpcrypto: On Tue, Jan 13, 2015 at 12:00 PM, Opa114 opa...@gmail.com wrote: thanks again. i have compared my code woth your peace of code you posted and i have the same. But i still get the Error: CKR_DEVICE_ERROR

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
On Tue, Jan 13, 2015 at 12:00 PM, Opa114 opa...@gmail.com wrote: thanks again. i have compared my code woth your peace of code you posted and i have the same. But i still get the Error: CKR_DEVICE_ERROR CKR_DEVICE_ERROR is an error on the cryptoki itself, as stated by PKCS#11 standard. I have

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
This one is working: http://pastebin.com/qqPf4cvM Regards On Tue, Jan 13, 2015 at 12:29 PM, Opa114 opa...@gmail.com wrote: Am Dienstag, 13. Januar 2015 12:14:28 UTC+1 schrieb helpcrypto helpcrypto: On Tue, Jan 13, 2015 at 12:00 PM, Opa114 opa...@gmail.com wrote: thanks again. i have

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
i mean the Server and CA not only own Certificates -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
i searched a little bit around and looked into the Mozilla dll's and i found out that the Built-In Trusted Root CAs are in the nssckbi.dll, so i changed my code to load this dll in libary in the config instead of the softokn3.dll. Programm runs and got no error, but the Size is zero. Any idea

Re: Accessing Firefox keystore

2015-01-12 Thread helpcrypto helpcrypto
To sum up: It's a Java bug. Consider copying softkn and dependencies to %temp% It only accepts elemental characters ie: not '(', neither 'รก'... On Mon, Jan 12, 2015 at 2:25 PM, Opa114 opa...@gmail.com wrote: hi again, yeah i googled the last days very much about this topic. so i found out

Re: Accessing Firefox keystore

2015-01-12 Thread helpcrypto helpcrypto
In fact, to be more funny, JRE8 has another bug (IIRC on XP) where spaces ' ' aren't neither allowed! Regards. On Mon, Jan 12, 2015 at 2:34 PM, helpcrypto helpcrypto helpcry...@gmail.com wrote: To sum up: It's a Java bug. Consider copying softkn and dependencies to %temp% It only accepts

Re: Accessing Firefox keystore

2015-01-12 Thread Opa114
okay i will try it by copy the files to %temp% and then try to load it up. What are the exact dependencies which i have to copy? i've read so many different.. :( i'm using JDK 1.8.0_25 for compiling my code. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org

Re: Accessing Firefox keystore

2015-01-12 Thread Opa114
hi again, yeah i googled the last days very much about this topic. so i found out the best solution for me would be so access the softokn3.dll with PKCS#11 Provider in java. i tried a little bit and wrote a small code. but it does not work. i got the Error parsing configuration, Unexpected

Re: Accessing Firefox keystore

2015-01-12 Thread helpcrypto helpcrypto
Hi If you want to work with cert8, even from Java, consider using certutil (via running a command). If you want to sing with a locally-installed X509 (keys are stored on key3.db), I still consider using SunPKCS#11 for attacking softkn3 your best option. Regards On Sat, Jan 10, 2015 at 2:46

Re: Accessing Firefox keystore

2015-01-12 Thread Opa114
Am Montag, 12. Januar 2015 18:51:51 UTC+1 schrieb helpcrypto helpcrypto: This is the dependency lack ;) This is what I have, probably some have changed: String[] nssDeps = { //WARNING: Order MATTERS! System.mapLibraryName(msvcr100),

Re: Accessing Firefox keystore

2015-01-12 Thread helpcrypto helpcrypto
This is the dependency lack ;) This is what I have, probably some have changed: String[] nssDeps = { //WARNING: Order MATTERS! System.mapLibraryName(msvcr100), System.mapLibraryName(msvcp100), System.mapLibraryName(mozglue),

Re: Accessing Firefox keystore

2015-01-12 Thread Opa114
i tried it but get another error: Caused by: java.io.IOException: modul not found - C:/Users/Matthias/AppData/Local/Temp/softokn3.dll but the file is in this folder. Where is the problem? -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org

Re: Accessing Firefox keystore

2015-01-09 Thread Robert Relyea
On 01/09/2015 08:03 AM, Opa114 wrote: i do. but i want to parse the cert8.db or maybe access this fle in an easier way with JAVA. i have to read the file and maybe i have to remove and/or add new certificate to it. While there is some documentation on the format of cert8.db, If you are

Re: Accessing Firefox keystore

2015-01-09 Thread Opa114
i do. but i want to parse the cert8.db or maybe access this fle in an easier way with JAVA. i have to read the file and maybe i have to remove and/or add new certificate to it. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Accessing Firefox keystore

2015-01-09 Thread helpcrypto helpcrypto
On Thu, Jan 8, 2015 at 11:19 PM, Robert Relyea rrel...@redhat.com wrote: On 12/11/2014 12:33 AM, helpcrypto helpcrypto wrote: Hi again, sorry for delay. Yes, you can (SHOULD) use SunPKCS#11 to access directly the libraries/modules. You can do it two ways: - attack libraries directly

Re: Accessing Firefox keystore

2015-01-09 Thread Opa114
could you give me a little example or hint how to parse the secmod.db? so that i can try t access the cert8.db with SunPKCS#11? i tried the code posted from above (DBHash.java), too. it reads out the cert8.db- but how can i convert the data i received into a x509 certificate? for example an

Re: Accessing Firefox keystore

2015-01-09 Thread helpcrypto helpcrypto
I'm parsing secmod.db, not cert8.db. If you plan to parse cert8.db I suggest you have a look on certutil source. https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Reference/NSS_tools_:_certutil Regards On Fri, Jan 9, 2015 at 12:04 PM, Opa114 opa...@gmail.com wrote: could you give

Re: Accessing Firefox keystore

2015-01-09 Thread Opa114
could you give me a little example or hint how to parse the secmod.db? so that i can try t access the cert8.db with SunPKCS#11? i tried the code posted from above (DBHash.java), too. it reads out the cert8.db- but how can i convert the data i received into a x509 certificate? for example an

Re: Accessing Firefox keystore

2015-01-08 Thread Robert Relyea
On 12/11/2014 12:33 AM, helpcrypto helpcrypto wrote: Hi again, sorry for delay. Yes, you can (SHOULD) use SunPKCS#11 to access directly the libraries/modules. You can do it two ways: - attack libraries directly - parse (legacy) secmod.db on Firefox profile to list modules/libraries.

Re: Accessing Firefox keystore

2015-01-08 Thread Opa114
Thanks for it. I will read your links and try my best to access the cert8.db ;) -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Accessing Firefox keystore

2014-12-11 Thread helpcrypto helpcrypto
Hi again, sorry for delay. Yes, you can (SHOULD) use SunPKCS#11 to access directly the libraries/modules. You can do it two ways: - attack libraries directly - parse (legacy) secmod.db on Firefox profile to list modules/libraries. Have a look on

Re: Accessing Firefox keystore

2014-12-09 Thread opa114
I have the same question / problem. I want to access the mozilla keystore (firefox and thundebird) via Java (No Java Applet) or C#? I found the JSS/NSS Provider, but no information on how to use it and on which way i can access the keystores. So how is it possible? Little example Code would be

Re: Accessing Firefox keystore

2014-12-09 Thread Opa114
I have the same question / problem. I want to access the mozilla keystore (firefox and thundebird) via Java (No Java Applet) or C#? I found the JSS/NSS Provider, but no information on how to use it and on which way i can access the keystores. So how is it possible? Little example Code would be

Re: Accessing Firefox keystore

2014-12-09 Thread Opa114
I have the same question / problem. I want to access the mozilla keystore (firefox and thundebird) via Java (No Java Applet) or C#? I found the JSS/NSS Provider, but no information on how to use it and on which way i can access the keystores. So how is it possible? Little example Code would be

Re: Accessing Firefox keystore

2014-12-08 Thread Jean Bave
Thank you for your answer. We tried the SunPKCS11 class but the thing is we are trying to access Firefox's keystore to reach the certificates of a physical token stored in it. Apparently the Sun provider cannot deal with physical tokens through Firefox's keystore. Does that seem plausible to you?

Re: Accessing Firefox keystore

2014-12-08 Thread Julien Pierre
Jean, On 12/8/2014 02:38, Jean Bave wrote: Thank you for your answer. We tried the SunPKCS11 class but the thing is we are trying to access Firefox's keystore to reach the certificates of a physical token stored in it. Apparently the Sun provider cannot deal with physical tokens through

Accessing Firefox keystore

2014-12-02 Thread Jean Bave
Hello everyone, I am currently trying to access the certificates stored in Firefox's keystore to sign an object. I tried with a Java applet using NSS then JSS but none of them worked. I was wondering if it was possible to access this by developing an add-on or plugin for Firefox? Regards,