Since NSS does not have an ability to load private keys from clear form,
then probably the right approach for tests suite would be to just use keys
from key db. Probably this means that xmlsec-nss should just ignore
private keys from xml keys file. For example, there would be one more
command line parameter for xmlsec utility:
    --crypto-config <path>
with path to crypto config folder. For NSS that would be path to keys and
certs db. You will prepare keys/certs db with same keys as keys and certs
in tests/keys/* and in other subfolders test/*.

I don't like this approach but it seems natural for NSS world. The only
thing I would like to think of is how to generalize it to make it less NSS specific.


Aleksey


_______________________________________________ xmlsec mailing list [EMAIL PROTECTED] http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to