Robert Relyea wrote:
> Modutil explicitly loads the PKCS #11 module into it's address space 
> before it loads it into the database. If you are running a 32-bit 
> version, then you may have problems loading a 64-bit pkcs11 module. In 
> addition you'll want to be careful which applications open the dbdir. A 
> 32-bit app won't be able to load your 64-bit pkcs11 module.

I reinstalled the OS and nCipher software using 32-bit versions and it 
worked fine this time.  Thanks a lot Robert.  Guess that's what I get 
for trying to use "unsupported" versions of the OS with the CA.

Dave

# modutil -add nShield-500 -libfile 
/opt/nfast/toolkits/pkcs11/libcknfast.so -dbdir . -nocertdb

WARNING: Performing this operation while the browser is running could 
cause corruption of your security databases. If the browser is currently 
running, you should exit browser before continuing this operation. Type
'q <enter>' to abort, or <enter> to continue:

Using database directory ....
Module "nShield-500" added to database.
# modutil -list -dbdir . -nocertdb
Using database directory ....

Listing of PKCS #11 Modules
-----------------------------------------------------------
   1. NSS Internal PKCS #11 Module
          slots: 2 slots attached
         status: loaded

          slot: NSS Internal Cryptographic Services
         token: NSS Generic Crypto Services

          slot: NSS User Private Key and Certificate Services
         token: NSS Certificate DB

   2. nShield-500
         library name: /opt/nfast/toolkits/pkcs11/libcknfast.so
          slots: 2 slots attached
         status: loaded

          slot: XXXX-XXXX-XXXX #1 nFast PCI device, bus 13, slot 3.
         token: accelerator

          slot: XXXX-XXXX-XXXX #1 nFast PCI device, bus 13, slot 3. slot 0
         token: test
-----------------------------------------------------------
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to