Resubmitted to dev-tech-crypto on advice of dev-apps-thunderbird developers:
I'm attempting to add our Organizational Certificate Authority to a
build of Thunderbird on Win32 but don't seem to be having any luck
getting it built into nssckbi.dll. I am taking the cacert.pem from our
CA's demoCA/cacert.pem file and converting it to der format with:
openssl x509 -in demoCA/cacert.pem -outform DER -out cacert.der
Then, having confirmed that I can do a build of the vanilla 1.5
Thunderbird source, I am attempting to add our CA:
(executed from ~\mozilla\security\nss\lib\ckfw\builtins path, > denotes
what I typed, < denotes what program returned)
addbuiltin -n "Our Org. CA" -t "C,C,C" -i \cacert.der >> new_certdata.txt
cat new_certdata.txt >> certdata.txt
make generate
<perl certdata.perl < certdata.txt
<Name "main::a" used only once: possible typo at certdata.perl line 214.
From googling the main::a error, it appears to be a non-issue. I then
verified that certdata.c had been updated. I can see the data for my
Organizational certificate in certdata.c. However, any attempt to
rebuild, whether I rebuild the entire Thunderbird tree or just do a make
in the builtins folder creates a nssckbi.dll identical to the one I
created with a vanilla compile. My certificate authority is not included.
I've also attempted to modify nssckbi.h as the builtin/README file
suggests. I have bumped the minor version from 53 (which is what TB 1.5
has) to 54:
#define NSS_BUILTINS_LIBRARY_VERSION_MINOR 54
#define NSS_BUILTINS_LIBRARY_VERSION "1.54"
But the compiled nssckbi.dll is still no different. Any hints as to
what I'm doing wrong?
Jay Lee
begin:vcard
fn:Jay Lee
n:Lee;Jay
org:Philadelphia Biblical University;Information Technology Department
email;internet:[EMAIL PROTECTED]
title:Network / Systems Administrator
version:2.1
end:vcard
_______________________________________________
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto
