Thanks for that information,it is very useful. I will use the NSS programs
pk11mode and pk11util and test their capabilities
In summary
1. Tools: The tools 'regress','reporter',replacer' have yet to be
released
2. The tests suite: The complete source to that test suite has never been
published. The code that I found is part of a test "harness" that runs the
real PKCS#11 tests, whose sources are not published. Even if we could
obtain and publish that old test source code, it was written to use NSS 2.x,
not NSS 3.x, and would take a bunch of work to make it build and run with
the current NSS 3.x.(Volunteers required for this work)
3. Other tests : Currently NSS has two other programs that are used for
PKCS#11 testing. They are pk11mode and pk11util. The sources to both are in
nss/cmd
Would it pe possible to add the above summary or similar information to
http://www.mozilla.org/projects/security/pki/pkcs11/netscape/
in order to help people who are investigating the Netscape PKCs#11 test
Suites for their projects
(for example my project a hardware accelerator)
Regards
Conor
From: Bob Relyea <[EMAIL PROTECTED]>
To: Wan-Teh Chang <[EMAIL PROTECTED]>
CC: dev-tech-crypto@lists.mozilla.org
Subject: Re: NSS - PKCS #11 Test Suites build problems
Date: Mon, 08 Jan 2007 14:00:23 -0800
Wan-Teh Chang wrote:
Also could someone tell me where the regress and reporter source is
available to download, I read on the mozilla website "The Netscape PKCS
#11 test suites make use of two testing tools whose source is available
with the source for the test suites "
I have the source code, but still need to review it for open
source release.
In summary, the remaining work is
1. release 'regress', 'reporter', and perhaps a third tool called
'replacer'.
2. update the test suites to work with NSS 3.x.
I second Nelson's suggestion of looking into 'pk11util'.
I use pk11util to test the basic functionality of a PKCS #11 module without
the need to use all of NSS. It's particularly useful in making sure that
you have a PKCS #11 module that can load and initialize. I usually use it
interactive, though the scripts can be useful in setting up particular
tests.
If you have a basically function PKCS #11 module, but want to regression
test it, that is what the PKCS #11 test tools were for. They tested PKCS
#11 modules in the context of various NSS operation (most notably SSL). If
you are working on something like a hardware accelerator, then getting
regress, reporter and replacer working would be useful.
Someday a comprehensive PKCS #11 test suite bases on the PKCS #11 spec and
several profiles would be useful, but to date no one has created such an
animal.
bob
<< smime.p7s >>
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
_________________________________________________________________
Get FREE Web site and company branded e-mail from Microsoft Office Live
http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
