agentma...@hotmail.com wrote:
Hi,
I created the db and added a certificate using these commands:
./certutil -N -n servercert -x -t "TCu,TCu,TCu" -s "CN=TestCA,
OU=Test, O=Test, L=Some City, ST=CA, C=US" -m 2 -d /tmp -f passfile
./certutil -S -n servercert -x -t "TCu,TCu,TCu" -s "CN=TestCA,
OU=Test, O=Test, L=Some City, ST=CA, C=US" -m 2 -d /tmp -f passfile
Then I am calling the JSS_SSLServer with this command:
java -Djava.library.path=. -classpath .:./jss4.jar
org.mozilla.jss.tests.JSS_SSLServer /tmp ./passfile localhost
servercert true 9191
the format for the password file for certutil and JSS are different.
JSS expects you to have the following format:
<Token Name>=<your password>
as in:
Internal\ Key\ Storage\ Token=<your password>
NSS\ FIPS\ 140-2\ User\ Private\ Key=<your password>
http://mxr.mozilla.org/security/source/security/jss/org/mozilla/jss/tests/passwords
-glen
However it fails with this exception:
unable to log into the token
org.mozilla.jss.util.IncorrectPasswordException
at org.mozilla.jss.pkcs11.PK11Token.nativeLogin(Native Method)
at org.mozilla.jss.pkcs11.PK11Token.login(PK11Token.java:178)
at org.mozilla.jss.tests.JSS_SSLServer.doIt(JSS_SSLServer.java:111)
at org.mozilla.jss.tests.JSS_SSLServer.main(JSS_SSLServer.java:71)
What could be the problem?
I have looked up the internet but could not find any references.
Please help.
thanks
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
