El Viernes, 10 de Marzo de 2006 18:25, escribió:
> The flag you want is PUBLIC_MECH_FRIENDLY_FLAG  in secmod.h
> (0x10000000). I'm not sure why you aren't getting password prompts with
> 0x5 (which means your token is the default RSA and RC2 token -- This
> should cause extra password prompts.
> See
> http://developer.mozilla.org/en/docs/JavaScript_crypto#Loading_PKCS_.2311_m
>odules for more information.
> (There the flag is more descriptive: PKCS11_PUB_READABLE_CERT_FLAG).

First of all thank you for your help Bob, I've read reference you told me but 
I have already had two problems that I think are in relation. The first one is 
that when I install my pkcs11 module from a JavaScript with 
PKCS11_PUB_READABLE_CERT_FLAG flag, the certificates token stores appear
on Firefox like certificates for others it is like Firefox doesn't know it can 
access private keys when loggin. 

The second problem is related with my token capabilities, it is able to sign 
(basically mechanism implements CK_RSA_PKCS and when I try to 
authenticate against a server using signature, Firefox still doesn't ask me 
for the password and the authentication fails. 

So, I don't know how to say Firefox that prompts for password in case 
private key is requiered because PKCS11_PUB_READABLE_CERT_FLAG
avoids every password prompting even for sign when is needed.

Any idea of what is happening?

Thank you very much.

PS: Sorry for the duplicate Bob, i forget CC it to the list.

Paul Santapau Nebot
Universitat Jaume I (www.uji.es)
Clauer Team (http://clauer.nisu.org)
_______________________________________________
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to