[EMAIL PROTECTED] wrote:
> hi all
> i am trying to access other people's cert from firefox cert store.  

>From inside of FireFox?
>From another program?

In JavaScript?
In Java?
In c or c++?
In perl?

> i can access cert from personal store with private key as per the
> filtering criteria(dn). but when i try to access other's cert, it
> returns null. i am using sunpkcs11 provider.  

Tell more about that.

FireFox has its own PKCS#11 module, softoken, part of the NSS package.
Each PKCS#11 module has its own key storage (or no key storage).
In general, one module does not know about another module's key stores.

Sun has numerous PKCS#11 modules, including one named "Meta slot" that
attempts to amalgamate other PKCS#11 modules, making them appear to be
different slots under that single common module.  It requires non-trivial
configuration to work with other modules.

It is possible to make FireFox use several of Sun's PKCS#11 modules
through this Meta Slot.
It is possible to configure Sun's meta-slot to use NSS's PKCS#11 module.

But in "normal" (out of the box) configuration, unless you specifically
alter their configurations, FireFox will use only NSS's softoken module
and Solaris's meta-slot will use only other solaris PKCS#11 modules.

Based on your limited description of your software, I'd guess that you
have your own software (in unknown language) that is not running as part
of FireFox and is trying to access FireFox's PKCS#11 module.  It is not
using FireFox's PKCS#11 module, but is using a Solaris module.

> where i am going wrong.
> can anybody tell me how to do this.
> it would be very helpful if u point me any site, which i can refer.
> 
> thanks
> 


-- 
Nelson B
12345678901234567890123456789012345678901234567890123456789012345678901234567890
00000000011111111112222222222333333333344444444445555555555666666666677777777778
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to