Re: Why does Softoken refuse to create keys with C_CreateObject in FIPS mode?

2010-08-22 Thread Nelson B Bolyard
On 2010-08-22 20:46 PDT, Nelson B Bolyard wrote: > On 2010-08-22 16:44 PDT, Brian Smith wrote: >> When NSS Softoken is in FIPS mode, it refuses to create keys with >> C_CreateObject. > > What means that it refuses to import secret or private key material Sorry, that should have read: Which mean

Re: Why does Softoken refuse to create keys with C_CreateObject in FIPS mode?

2010-08-22 Thread Nelson B Bolyard
On 2010-08-22 16:44 PDT, Brian Smith wrote: > When NSS Softoken is in FIPS mode, it refuses to create keys with > C_CreateObject. What means that it refuses to import secret or private key material that is being kept "in the clear" outside of the security module boundary into the security module,

Why does Softoken refuse to create keys with C_CreateObject in FIPS mode?

2010-08-22 Thread Brian Smith
When NSS Softoken is in FIPS mode, it refuses to create keys with C_CreateObject. The same method works fine in regular (non-FIPS) mode. But, it is possible to achieve the exact same effects using either any of the procedures outlined below. So, what is the motivation for prohibiting the key creati

Re: ReferenceTable overflow (max=512)

2010-08-22 Thread Jean-Marc Desperrier
On 19/08/2010 22:44, Nelson B Bolyard wrote: Support for NSS on device OSes (such as cell phone OSes) is provided by various teams that are adapting Firefox to run on those devices. Mozilla has a team that does that and I suspect they could help you Maybe they couldn't. That's a JSS problem, a