Hi, I'm building the 3.12.5 with NSPR .tgz from Mozilla FTP on a Fedora system. Yeah, I noticed this was a problem before, but I was fine with just NISTP256 to 521 except you're saying the previous command won't work in Basic ECC mode. Wait, you said RPM, as in not building from source from Mozilla? I've tried the src-rpm with the ECC flags and had no luck, but was successful with the Mozilla .tgz for just Basic ECC. I guess now that you've established NSS compiled with "NSS_ENABLE_ECC" and "NSS_ECC_MORE_THAN_SUITE_B" should work using softoken, what are the workarounds to get the source from .tgz to build?
Thanks, Kai On Tue, Jan 19, 2010 at 6:29 AM, David Stutzman < [email protected]> wrote: > On 1/15/2010 4:21 PM, Kai Chan wrote: > >> certutil -R -s "CN=ectest, O=ectest, L=ectest, ST=ectest, C=US" -p >> "123-456-7890" -o ectest.req -d . -k ec -q nistp256 -Z SHA256 >> > > That command works for me. Are you trying this on a Red Hat or Fedora > system? If so, compiling NSS with extended ECC support has a few more hoops > to jump through. There's something about how they patch/build their rpm > that makes it impossible to just enable NSS_ECC_MORE_THAN_SUITE_B and build > the whole thing. > > Dave > > -- > dev-tech-crypto mailing list > [email protected] > https://lists.mozilla.org/listinfo/dev-tech-crypto >
-- dev-tech-crypto mailing list [email protected] https://lists.mozilla.org/listinfo/dev-tech-crypto
