Re: NSPR assertion failure

Hi Wan-Teh, Before I try to get the stack track using gdb on the core file, as I made it to crash with your suggested change, Java crashed with this error. Actually it also stack trace. Can you see anything from it. I appreciate your help. This is a must fix for us. # # An unexpected error has

Re: non-approved PRNG in FIPS mode

Thanks Wan-Teh for the reply. In the link you have sent it is stated that, The initial value of XKEY is derived using the following procedure. We obtain 1024 bytes from the system random number generator. On Windows XP SP 2, we call the CryptGenRandom function in the CryptoAPI. On Solaris,

Re: RNG continuous test failure

Thanks Glen for the information. On Apr 24, 5:57 pm, Glen Beasley glen.beas...@sun.com wrote: ksreedha...@gmail.com wrote: On Apr 24, 10:03 am, Wan-Teh Chang w...@google.com wrote: On Thu, Apr 23, 2009 at 1:51 PM,  ksreedha...@gmail.com wrote: Hello, I am using Mozilla JSS provider

Re: NSS source building

Thanks Glen. Some how without making any changes it worked now. Probably I did some thing wrong earlier. Thanks, SReedhar On Apr 27, 11:44 am, Glen Beasley glen.beas...@sun.com wrote: ksreedha...@gmail.com wrote: Thanks Glen for the response. I just copied new built library files to the

Re: non-approved PRNG in FIPS mode

Hello Nelson, I didn't frame my original question correctly. For FIPS, Continuous RNG test should be performed on approved or non approved RNG that are used. If I understand correctly, NSS uses /dev/urandom as entropy source but it does not generate the random number twice from /dev/urandom and

Re: NSS source building

Thanks Glen for the response. I just copied new built library files to the same directory where the original ones were. No environment changes. The library files directory is in LD_LIBRARY_PATH. Do I need to build JSS from source if I build NSS/NSPR from source or can I use the binaries

NSS source building

Hello, I am using JSS 4.2.5, NSS 3.11.4, NSPR 4.6.4. If I use the binaries downloaded from https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_11_4_RTM/Linux2.6_x86_glibc_PTH_DBG.OBJ/ and

non-approved PRNG in FIPS mode

Hello, I am using NSS 3.11.4 and NSPR 4.6.4 Will the non-approved PRNG of NSS be functional/usable when NSS is in FIPS mode. Thanks, Sreedhar -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: RNG continuous test failure

On Apr 24, 10:03 am, Wan-Teh Chang w...@google.com wrote: On Thu, Apr 23, 2009 at 1:51 PM,  ksreedha...@gmail.com wrote: Hello, I am using Mozilla JSS provider from Java. JSS 4.2.5 NSS 3.11.4 NSPR 4.6.4 When the FIPS RNG continuous tests fail, what is the behavior in NSS/ JSS.

RNG continuous test failure

Hello, I am using Mozilla JSS provider from Java. JSS 4.2.5 NSS 3.11.4 NSPR 4.6.4 When the FIPS RNG continuous tests fail, what is the behavior in NSS/ JSS. What does it return. do we get an java exception to the calling function. For example, when Java code tries to establish a TLS Socket

Re: NSPR assertion failure

Hello Julien, When I tried to print the values for rv and errno, gdb complained saying No symbol for these variables in current context. I used symbol-file command with all the nspr libraries. and then ran the command core with the core file. Which library has these variables. What I did is,

Re: RSA AES Cipher problem with JSS/NSS

Thanks Nelson for the reply. Jss version is 4.2.5 JRE version is 1.6 NSS vesion is 3.11.4 See my comments inline. On Apr 1, 8:45 pm, Nelson B Bolyard nel...@bolyard.me wrote: ksreedha...@gmail.com wrote, On 2009-04-01 17:54: Hello, I am [using] Mozilla-JSS as the provider in my Java

Re: RSA AES Cipher problem with JSS/NSS

Thanks Glen. Yes it works with the default provider. tstclnt fails with the error Issuer certificate is invalid. When I used with option -o (Override bad server cert), it works fine. The certificate wes used is a Self signed certificate. So, probably tstclnt didn't like it. One more thing is,

tstclnt with self signed certificate

Hello, NSS version 3.11.4 If I use the tstclnt with self signed certificate on the server (with some name in Issuer/Subject common name for Certiificate) tstclnt -h hostname -p port -d your nss cert db dir -v -2 -3 -c v. It fails with the error certificate issuer is not recognized. If I use

RSA AES Cipher problem with JSS/NSS

Hello, I am Mozilla-JSS as the provider in my Java application which is a SSL client connecting to OpenSSL based SSL Server. I am using the cipher suite TLS_RSA_WITH_AES_128_CBC_SHA and we are using TLSv1.0 as the SSL protocol. I get this exception when I try to connect to the server. Server

Re: NSPR assertion failure

Hi Julien, I am running this on CentOS 5. This is part of the Java Server. Where should I see the core file. I didn't find one. I searched entire file system for the core What would be the file name. Thanks, Sreedhar On Mar 23, 3:41 pm, Julien R Pierre - Sun Microsystems

NSPR assertion failure

Hello, I am using JSS 4.2.5, NSS 3.11.4 and NSPR 4.6.4 Many times, my Java Server crashes with the following error. Assertion failure: 0 == rv, at ../../../../../nsprpub/pr/src/pthreads/ ptsynch.c:207 Is there any solution to this. Thanks, Sreedhar -- dev-tech-crypto mailing list

Re: NSPR assertion failure

On Mar 20, 9:59 pm, ksreedha...@gmail.com wrote: Hello, I am using JSS 4.2.5, NSS 3.11.4 and NSPR 4.6.4 Many times, my Java Server crashes with the following error. Assertion failure: 0 == rv, at ../../../../../nsprpub/pr/src/pthreads/ ptsynch.c:207 Is there any solution to this.

NSS RNG

Hello, Does NSS support Regular 186 RNG also along with General Purpse RNG? Thanks, Sreedhar -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: JSS API for FIPS Self Tests

On Jan 14, 10:21 am, Glen Beasley glen.beas...@sun.com wrote: Sreedhar Kamishetti wrote: Hello, I just started looking at JSS. Can some one point me to the API provided by JSS for running Power Up and Conditional Self Tests for various cryptographic modules/algorithms? JSS is a JAVA