Chris, Chris wrote: > > One possibly critical difference between your certs and mine are that > both of the certs I'm using can be used for signing. If I had to guess, > I would say that seems to be the problem; when you have multiple signing > certs with similar attributes and performing a signing operation. > > If you would like, I can send you both of the certs I'm working with. I > can't send a full P12 since I don't have the private keys, but I can > send just the certificates.
I don't think the certs will help trace the problem. Ideally, I think this will require that you debug mozilla and your module with a debug version of NSS. You don't need a mozilla debug build, only NSS. It is fairly simple to build and the procedure is described on mozilla.org, but I can provide bits for you to try if you don't have time. Just give me the OS, version and mozilla build date you are using with your smartcard. I will also tell you of 3-4 few places in the mozilla and NSS code to set breakpoints and check what's going on. -- "Except for the lack of debugging and the ps thing, [Linux] kernel threads are generally fine right now. And if you're not too fussed about the more fiddly details of POSIX threads, and your application doesn't spend most of its time in thread creation, then LinuxThreads is great too." Linux-Kernel archive
