Re: Need to use the main NSS module as a PKCS#11 module in IBM Notes

2013-09-10 Thread Elio Maldonado Batiz
Hi Kyle,

nss3.dll is a not PKCS #11 module as it has no crypto, softokn3.ddl (.so)
and freebl3.sll (.so) do. softoken is nss's own internal PKCS #11
cryptographic module which nss loads just like any other pkcs #11 module,
software or hardware based.

Good starter documents are
https://developer.mozilla.org/en-US/docs/NSS_reference and
https://developer.mozilla.org/en-US/docs/NSS#Background_Information
and https://developer.mozilla.org/en-US/docs/NSS/NSS_API_GUIDELINES has a
layering diagram

-Elio


On Sat, Aug 24, 2013 at 6:02 PM, Kyle Hamilton  wrote:

> Hi,
>
> I'm finding myself in a situation where I need to use the certificates and
> keys stored in my standard NSS profile in other applications.
>
> My initial, naïve idea was that NSS itself is a PKCS#11 module.
> Unfortunately, this appears to be not the case.  When trying to find the
> right DLL to load into IBM Notes I found that nssckbi.dll is recognized as
> a valid PKCS#11 module, but nss3.dll is not.  (Neither are nssdbm3 or
> nssutil.)
>
> Is there any plan to export the NSS softoken functionality as an actual
> full PKCS#11 token?  Or is it intended never to actually operate as such?
>
> -Kyle H
> --
> dev-tech-crypto mailing list
> dev-tech-crypto@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-tech-crypto
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: Proposal to Change the Default TLS Ciphersuites Offered by Browsers

2013-09-10 Thread Kurt Roeckx
On Mon, Sep 09, 2013 at 07:20:57PM +0100, Rob Stradling wrote:
> Probably worth keeping an eye on this new draft and the related
> discussion on the TLS list...
> 
> http://tools.ietf.org/html/draft-sheffer-tls-bcp-00

Note that the recommended cipher there isn't in Brian's proposal,
and I've already pointed that out.


Kurt

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto