Milan,
I just jumped in and replaced with CERT_ImportCerts (I couldn't get it
to compile otherwise). Sorry about that - if you want to do it
differently feel free to change what I've done :>.
I've also made some minor changes in a couple of the other files to
support Symmetric padding and re-use of symmetric keys (particularly
necessary for key wraps and unwraps).
The upside of all the above is that xtest now has an nss option added in
and seems to run AOK!
I'll add it into the UNIX build process once we decide how we want to
handle includes.
Cheers,
Berin
Berin Lautenbach wrote:
Milan,
I've been working on getting the NSS provider stuff working on my
machine and have run into a few snags. So some questions :>.
1. The includes in the NSS files are of the form "nss/....h", which
means I have to put the nss include files into such a directory -
including nspr files, which on linux systems (or at Debian) are
separated intp nspr vs. nss directories. Would we be better just
including as (for example) <cert.h> and then having the user set what
the directories are? (Fits better with the mozilla model I think.)
2. I'm having no joy with __CERT_DecodeDERCertificate? From the
comments and from looking around it's a private function that we can't
see (or at least I can't when I link). Looking at CERT_ImportCerts I
don't know enough about the certificate DB to know how to do a temporary
cert. Any thoughts welcome!
Cheers,
Berin
