Re: Signature with a privatekey doesn't works in JSS

2010-10-08 Thread Felix Alejandro Prieto Carratalá
Hi Jean-Marc, That line is commented because previously I handle the privatekey with findPrivKeyByCert, so that is only for information purpose and the privatekey exists. That code works with a privatekey stored in pkcs12 file, so i think that the problem is with JSS and its philosophy o

how to modify the absolute profile path in secmod.db

2010-10-08 Thread al_9x
I noticed when moving a profile that secmod.db retains the old absolute profile path (configdir='...') Is the path used for anything? Does it need to be updated? How? Can secmod.db be deleted and regenerated? What are the consequences? -- dev-tech-crypto mailing list dev-tech-crypto@list

Re: to make all libraries static

2010-10-08 Thread Wan-Teh Chang
Hi Dmitry, I published unsupported patches for using NSS as static libraries in https://bugzilla.mozilla.org/show_bug.cgi?id=534471. (Please do not post questions in that bug report. I want to keep the bug report focused on the patches.) You're welcome to try them. Note that I didn't go all th

to make all libraries static

2010-10-08 Thread Dmitry Sokolov
Hi I am to build some specific NSS bundle for internal use in our application (windows only). At first i try to build certutil.exe free of any dependencies except system .dll's I patched prtypes.h to make all public symbols not __declspec(dllexport) and __declspec(dllimport) and a number o

Re: Support for SSL False Start in Firefox

2010-10-08 Thread Jean-Marc Desperrier
Stephen Shankland wrote: I've now located the blacklist file, which at present has 661 sites blacklisted, so I suspect you guys are right on that basis, too. The way it was written on Langley's blog, one could easily think they had used the method of calculation that gave a better looking perc

Re: Signature with a privatekey doesn't works in JSS

2010-10-08 Thread Jean-Marc Desperrier
Felix Alejandro Prieto Carratala wrote: I also try this: [...] //pk is a org.​mozilla.​jss.​crypto.PrivateKey that i get with //CryptoManager.findPrivKeyByCert(cryptoManager.findCertByNickname(nickName)); Why is that line commented out ? Do you test you get a valid pk handle out of findPrivKey