Re: Cert MIME types

2008-08-04 Thread Michael Ströder
Nelson B Bolyard wrote: Michael Ströder wrote, On 2008-07-25 06:13: Nelson B Bolyard wrote: I suggest you look at http://developer.mozilla.org/en/docs/NSS_Certificate_Download_Specification for ideas on importing certs. I wonder why Mozilla doesn't support application/pkix-cert and

Re: JSS version problem

2008-08-04 Thread Glen Beasley
hi, JSS 4.3 beta requires NSS 3.12 because it is calling new API that was introduced in NSS 3.12. JSS 4.2.5 should be able to use NSS 3.12 and have no compatibiltity issues. You don't state the actual error you're seeing. Could you send me a private version of your applet and instructions on

Re: Question about importing PKCS#7 chain

2008-08-04 Thread Nelson B Bolyard
Jamie wrote, On 2008-08-04 12:12: I am attempting to allow users to import a PKCS#7 certificate chain into their browser, but I see in the Mozilla developer docs that the certificates in the PKCS#7 file must be ordered in a specific way (user certificate first with the CA chain following)

Re: RSA OAEP encryption support in NSS

2008-08-04 Thread Nelson Bolyard
Nelson Bolyard wrote, On 2008-08-03 21:05: David Allan wrote, On 2008-08-02 19:43: would you like me to file a bug against that? Yes, please. You can put this text into the bug report, if you'd like. I filed this bug about the issue: https://bugzilla.mozilla.org/show_bug.cgi?id=449087

Re: RSA OAEP encryption support in NSS

2008-08-04 Thread Robert Relyea
Nelson Bolyard wrote: Yes, please. You can put this text into the bug report, if you'd like. I just walked through that code again more carefully. It's definitely a bug. It's really a flaw in the design of the private function pk11_ForceSlot. That function can have any of the following

Re: RSA OAEP encryption support in NSS

2008-08-04 Thread David Allan
Thanks for filing it--I've been tied up away from my machine all day today. Dave On Mon, 4 Aug 2008, Nelson Bolyard wrote: Nelson Bolyard wrote, On 2008-08-03 21:05: David Allan wrote, On 2008-08-02 19:43: would you like me to file a bug against that? Yes, please. You can put this text

Re: pkcs11 nss specific types

2008-08-04 Thread Robert Relyea
133mmx wrote: If you instead would tell us exactly what you want to know or perhaps what your specific problem is, perhaps someone might be able to actually help. I will try to summarize my problem. I am implementing pkcs#11 library to access our smart card. Currently i am testing ssl. I

Re: stand-alone PKCS#11 + soft token using NSS(?)

2008-08-04 Thread Robert Relyea
avih wrote: I'd really appreciate any answer or further pointers. I'm still interested in this stand alone implementation... I've described my latest experience earlier on this topic. Sorry I was away when you first asked your questions A good place to start in implementing a PKCS #11

Re: Comparison of OpenSSL and NSS

2008-08-04 Thread Robert Relyea
Nelson B Bolyard wrote: Joe Orton wrote, On 2008-07-28 16:09: On Sat, Jul 26, 2008 at 05:17:56PM -0700, Nelson Bolyard wrote: Daniel Stenberg wrote, On 2008-07-26 13:45: As a user of OpenSSL, NSS, yassl and GnuTLS I can certainly agree that GnuTLS has flaws in its API but NSS

NSS Shared DB ready for testing

2008-08-04 Thread Kai Engert
On behalf of Bob Relyea, who did the majority of the work on this feature, we would like to announce that a new feature for sharing the NSS database amongst multiple applications is ready for testing. The feature is included in NSS 3.12 which is the version that got shipped in Firefox 3. We