Martin Leung wrote:
> 
> Hi,
> 
> Is there any difference between the requirement of pkcs11 modules for
> Commnicator 4.7 and Mozilla?

Yes.  Communicator 4.7 only used a small subset of the capabilities defined
for a PKCS11 module.  Mozilla uses a much larger subset.  So a module that
implemented only the subset that communicator uses and no more will not 
work with Mozilla.  A module that implements the full spec will work with
both.

> I have a smartcard based pkcs11 module that works with Communicator 4.7 but
> failed with Mozilla 0.9.8+ (exact version:  Mozilla/5.0 (Windows; U; Windows
> NT 5.0; en-US; rv:0.9.8+) Gecko/20020204 ) . For both mail signing and web
> auth., I got the following error:
> 
> Error establishing an encrypted connection to <server_name>. Error
> Code: -12222.

Error -12222 is SSL_ERROR_SIGN_HASHES_FAILURE.  It means that when the 
SSL code called the PK11 code to sign the handshake hashes with the 
private key, the attempt to sign the hashes failed (e.g., the module 
returned an error).  

> Any hint?
> 
> Rgds.
> Martin


--
Nelson Bolyard               Netscape 
Disclaimer:                  I speak for myself, not for Netscape

Reply via email to