Anders Rundgren wrote: > Hi, > Is there a way of connecting SUN's java pkcs11 driver to FF and > be able to treat all installed security modules as a single unit? > > Pardon if the question is badly phrased, my experience is mainly > with CryptoAPI which is a bit simpler (primitive maybe). > > I have with the following parameters been able to read all soft certs > but it does not get me to the installed smart card drivers: > > name=NSS > library=c:\Program Files\Mozilla Firefox\softokn3.dll > description=NSS PKCS11 > nssArgs="configdir='c:/Documents and Settings/Administrator/Application > Data/Mozilla/Firefox/Profiles/vyaxk8jd.default' > certPrefix='' keyPrefix='' secmod='secmod.db' flags=readOnly" > slot=2
Yes, softokn3.dll is NSS's own PKCS #11 crypto module. softokn3.dll doesn't treat all installed security modules as a single unit. Solaris has such a thing, called a meta slot. You can do a Web search for "Solaris meta slot" to find out more about it. I believe this meta slot is only available on Solaris though. NSS also has a layer (the PK11_xxx functions) that allows an NSS-based application to use all installed security modules easily, but that layer is not exposed as a single PKCS #11 slot. Wan-Teh _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
