Re: Fedora Crypto Consolidation

2007-09-12 Thread Jean-Marc Desperrier
Arshad Noor wrote: Given that the Fedora community is embarking on an effort to consolidate crypto keystores and libraries, it would make sense to take the needs of the Java community also into consideration in the design and implementation. [...] What would be ideal is for JSS to evolve

Re: Fedora Crypto Consolidation

2007-09-12 Thread Arshad Noor
: Fedora Crypto Consolidation Since java 1.5, there is a pkcs#11 base JCE included by default in the SUN JVM. It works with NSS, if you configure correctly some compatibility options : http://java.sun.com/javase/6/docs/technotes/guides/security/p11guide.html#NSS So the best choice would be to rely

PKCS #11 sucks. Re: Fedora Crypto Consolidation

2007-09-12 Thread Anders Rundgren
, 2007 15:22 Subject: Re: Fedora Crypto Consolidation Arshad Noor wrote: Given that the Fedora community is embarking on an effort to consolidate crypto keystores and libraries, it would make sense to take the needs of the Java community also into consideration in the design and implementation

Fedora Crypto Consolidation

2007-09-11 Thread Arshad Noor
Noor StrongAuth, Inc. Robert Relyea wrote: It's part of the Fedora Crypto Consolidation project: http://fedoraproject.org/wiki/FedoraCryptoConsolidation ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org

Re: Fedora Crypto Consolidation

2007-09-11 Thread Robert Relyea
Arshad Noor wrote: What would be ideal is for JSS to evolve into becoming just another pluggable JCE Provider and hide the access to the consolidated Fedora crypto keystore/library behind that interface. You will then be doing two communities a great service. IIRC, JSS is a JCE provider, as

Re: Fedora Crypto Consolidation

2007-09-11 Thread Steve Parkinson
Robert Relyea wrote: Arshad Noor wrote: What would be ideal is for JSS to evolve into becoming just another pluggable JCE Provider and hide the access to the consolidated Fedora crypto keystore/library behind that interface. You will then be doing two communities a great service. IIRC,