Re: Linker error from tstclnt

2017-11-22 Thread Robert Relyea

On 11/22/2017 07:24 AM, Kai Engert wrote:

On 10.11.2017 10:16, muni.pra...@gmail.com wrote:

USE_STATIC_RTL=1

I haven't seen this symbol before, maybe it's no longer supported.

Does it work if you don't define it?


The symbol means build the test binaries with static libraries. That 
hasn't been officially supported by NSS for quite some time (though it 
may accidentally work on some platforms). Only certain low level test 
apps whould use the static run time, and they explicitly set the value 
in their makefiles.


bob


Kai



--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: Linker error from tstclnt

2017-11-22 Thread Kai Engert
On 10.11.2017 10:16, muni.pra...@gmail.com wrote:
>> USE_STATIC_RTL=1

I haven't seen this symbol before, maybe it's no longer supported.

Does it work if you don't define it?

Kai
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Adding a custom new ciphersuite to NSS

2017-11-22 Thread 12msccsfmasood--- via dev-tech-crypto
Hello everyone.

I have a small research oriented project in which I have to add a custom 
similar to AES like cipher to the NSS which will later be used by the 
Thunderbird for TLS establishment. 

Can someone guide me the steps or bird eye view of how to accomplish this. At 
the moment I have added/defined my ciphers in the following files by doing my 
own limited research:

i. sslproto.h
ii. sslenum.c
iii. ssl3con.c
iv. ssl3ecc.c

the ciphersuite name is === TLS_ECDHE_ECDSA_WITH_MYAES_128_GCM_SHA256

HEX number given to it  === OXC02A


however when I compile the following error comes in:
ssl3con.c(184): error C2078 too many initalizers
ssl3con.c(293): error C2065 cipher myaes_128_gcm : undeclared identifier

and alot more errors ...

If someone can give me an example or just some high level guidance for defining 
the custom CIPHER I will be very very thankful. 

ps: i know adding a custom cipher is not recommended and can cause security 
issues but its a research oriented project. NSS version is 
NSS_3_19_2_WITH_CKBI_1_98_BRANCH
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: modutil add module "ActiveClient" gives error "error 193" (win10)

2017-11-22 Thread tmpacount . mari
On Wednesday, August 3, 2016 at 11:31:24 AM UTC+4, Marjan Savli wrote:
> I would like to simplify adding USB ActiveClient Reader into Firefox on
> win10.
> I already managed to make a batch file to simplify importing our 6
> certificates into Firefox.
> 
> Manually I would do this step by step after this manual: https://www.
> creaplus.si/faq/72-activclient-v-brskalniku-firefox
> And if I manually add acpkcs211.dll the result is:
> 
> =
> bin\modutil.exe -dbdir %Mapa% -list
> 
> Listing of PKCS #11 Modules
> ---
>   1. NSS Internal PKCS #11 Module
>  slots: 2 slots attached
> status: loaded
> 
>  slot: NSS Internal Cryptographic Services
> token: NSS Generic Crypto Services
> 
>  slot: NSS User Private Key and Certificate Services
> token: NSS Certificate DB
> 
>   2. ActiveCard
> library name: C:\Program Files\ActivIdentity\ActivClient\acpkcs211.
> dll
>  slots: There are no slots attached to this module
> status: Not loaded
> ---
> =
> 
> 
> But when I try the same action with modutil, the result is "error 193".
> 
> =
> bin\modutil.exe -dbdir %Mapa% -add "ActiveClient" -libfile "c:\Program
> Files\ActivIdentity\ActivClient\acpkcs211.dll"
> 
> WARNING: Performing this operation while the browser is running could cause
> corruption of your security databases. If the browser is currently running,
> you should exit browser before continuing this operation. Type
> 'q ' to abort, or  to continue:
> 
> Using database directory
> C:\Users\UserUE\AppData\Roaming\Mozilla\Firefox\Profiles\ib42fuyl.default...
> ERROR: Failed to add module "ActiveClient". Probable cause : "error 193".
> =
> 
> I can not find any description of this error.
> Some help is appreciated.
> Thanks.
> 
>   Marjan   --

Have you solved the case?
I have the same problem when I try to add 64-bit dll. 32-bit version works fine.
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


adding new custom cipher to NSS

2017-11-22 Thread f masood via dev-tech-crypto
Hello everyone.

I have a small research oriented project in which I have to add a custom 
similar to AES like cipher to the NSS which will later be used by the 
Thunderbird for TLS establishment. 

Can someone guide me the steps or bird eye view of how to accomplish this. At 
the moment I have added/defined my ciphers in the following files by doing my 
own limited research:

i. sslproto.h
ii. sslenum.c
iii. ssl3con.c
iv. ssl3ecc.c

the ciphersuite name is === TLS_ECDHE_ECDSA_WITH_MYAES_128_GCM_SHA256

HEX number given to it  === OXC02A


however when I compile the following error comes in:
ssl3con.c(184): error C2078 too many initalizers
ssl3con.c(293): error C2065 cipher myaes_128_gcm : undeclared identifier

and alot more errors ...

If someone can give me an example or just some high level guidance for defining 
the custom CIPHER I will be very very thankful. 

ps: i know adding a custom cipher is not recommended and can cause security 
issues but its a research oriented project. NSS version is 
NSS_3_19_2_WITH_CKBI_1_98_BRANCH
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto