Christian Bongiorno wrote: > Ok, I have spent over a week tweaking and toying with things and, > although I believe I am dead on, for some reason, thunderbird will not > accept the certificate on my card as valid. > > I have included the open-sc spy logs inline-- > > The last success I have show's NSS looking fro CKO_PRIVATE_KEY, which > tell it I have 1, and then it never checks the follow on attributes for > it! It almost appears as if it begins to loop on getInfoXXX > > Can someone please tell me WHAT I am missing? Compared to the logs I > have for another working card everything looks to be in order > > As an aside, I will look through the thunderbird code myself for > conditions of this error -- is their a breakdown of what needs to be > setup for acceptance? > > > Christian
> *************** OpenSC PKCS#11 spy ***************** > Loaded: "C:\dev\NIST_PKCS11\bin\NIST_PKCS11.dll" <snip> > 37: C_GetAttributeValue > [in] hSession = 0x1 > [in] hObject = 0x4 > [in] pTemplate[10]: <snip> > CKA_NETSCAPE_EMAIL(Netsc) requested with 0 buffer > [out] pTemplate[10]: <snip> > CKA_NETSCAPE_EMAIL(Netsc) has size -1 > Returned: 18 CKR_ATTRIBUTE_TYPE_INVALID > > > 38: C_GetAttributeValue > [in] hSession = 0x1 > [in] hObject = 0x4 > [in] pTemplate[10]: <snip> > CKA_NETSCAPE_EMAIL(Netsc) requested with 0 buffer > [out] pTemplate[10]: <snip. > CKA_NETSCAPE_EMAIL(Netsc) has size -1 > Returned: 18 CKR_ATTRIBUTE_TYPE_INVALID > > > 39: C_GetAttributeValue > [in] hSession = 0x1 > [in] hObject = 0x4 > [in] pTemplate[1]: > CKA_NETSCAPE_EMAIL(Netsc) requested with 0 buffer > [out] pTemplate[1]: > CKA_NETSCAPE_EMAIL(Netsc) has size -1 > Returned: 18 CKR_ATTRIBUTE_TYPE_INVALID > > > 40: C_GetAttributeValue > [in] hSession = 0x1 > [in] hObject = 0x4 > [in] pTemplate[1]: > CKA_NETSCAPE_EMAIL(Netsc) requested with 0 buffer > [out] pTemplate[1]: > CKA_NETSCAPE_EMAIL(Netsc) has size -1 > Returned: 18 CKR_ATTRIBUTE_TYPE_INVALID OK, this is way out of my domain, but I did notice these entries. Whether or not they have any bearing on your problem, I do not know. Perhaps asking on mozilla.dev.tech.crypto? -- Alex _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
