Netscape CMS 1.01 migration

2003-01-17 Thread Blaz Malnersic
back to 1997... :) we are performing partial CA server migration (Netscape CMS 1.01). Basicaly all we need from old server is signing key pair, stored in file C:\Netscape\Server\cms-nsca1\config\CASigningKey.db. This seems hard to do. There is one way: a) obtain Netscape CMS 4.x and use their:

Re: why is an encryption cert needed....

2003-01-17 Thread Nelson B. Bolyard
Gerd Schering wrote: I want to sign amessage, but mozilla complains, it finds no encryption cert to include. Why is that needed, when I only wnat to signe the message? This is a known issue with mozilla. Mozilla requires you to have an encryption cert to sign messages, That can either be a

Re: Aladdin eToken and Mozilla

2003-01-17 Thread Julien Pierre
Hi, Remo Inverardi wrote: Caption: Alert, Message: localhost has received an incorrect or unexpected message. Error Code: -12227 This means SEC_ERROR_REVOKED_KEY . Are you using any means of certificate or key revocation ? Eg. OCSP, CRLs, or CKLs ? Is PKCS#11 support in Mozilla actually

Aladdin eToken and Mozilla

2003-01-17 Thread Remo Inverardi
I am trying to get my Aladdin eToken smartcard (it actually is a USB token) to work with Mozilla/1.3 (latest nightly build). There seems to be some interoperability problem between Aladdin's PKCS#11 implementation and Mozilla. Loading the PKCS#11 module seems to work fine. The certificate

Private Keys and jss

2003-01-17 Thread Alex Forkosh
I am trying to figure out how to export Key pairs from PKCS11 module using JSS. I able to export Public keys in DER format but I am having problems extracting Private keys. Also is it possible to export key pair as p12 file? Any help is appreciated. Thanks.