Re: Key Gen in a browser

2006-10-16 Thread Anders Rundgren
Although it may be too late for your needs, it might be of interest to know that I and some other people are in the process of creating a ground-up key provisioning system for use in browsers? My own guess is that on-line PKI provisioning will become the norm for most large PKI deployments but the

Re: Key Gen in a browser

2006-10-16 Thread Steve Parkinson
Bob Relyea wrote: ben wrote: I'd like to know does the call a local PKCS11 module, and how does it store the key pair into the local key store and how I can know which PKCS11 module will be used if there are more than two? Here is a piece of HTML code: If you can point out a doc

Re: Key Gen in a browser

2006-10-16 Thread Bob Relyea
ben wrote: Hi there, I'd like to know does the call a local PKCS11 module, and how does it store the key pair into the local key store and how I can know which PKCS11 module will be used if there are more than two? PSM looks up all the writable tokens that are capable of handling the partic

Key Gen in a browser

2006-10-16 Thread ben
Hi there, I'd like to know does the call a local PKCS11 module, and how does it store the key pair into the local key store and how I can know which PKCS11 module will be used if there are more than two? Is there any similar way for IE with a CSP? Here is a piece of HTML code: If y

cannot load Firefox -- get Exception

2006-10-16 Thread Christian Bongiorno
Can someone shed some light on this: I am trying to load firefox in my debugger and I get these exceptions over and over and the browser window never shows: First-chance exception at 0x7c812a5b in firefox.exe: Microsoft C++ exception: XML::XmlObject @ 0x0013e338. First-chance exception at 0x7

[SECURITY] setuid-root programs linked with NSPR can be used to truncate any file

2006-10-16 Thread Wan-Teh Chang
In NSPR releases 4.6.2 or earlier, setuid-root programs linked with NSPR can be used to truncate any file. The prerequisites for this security vulnerability are: 1. Your NSPR-based programs are running on an operating system with the setuid-root feature. The operating systems with this feature a

Re: trying to sign data in tbird -- pkcs11

2006-10-16 Thread Christian Bongiorno
Ok, nevermind, I got it -- 1 byte, just 1-- was out of place in my padding! Now it verifies. Thanks for your help just the same. Christian Bongiorno wrote: Bob, I am being asked for CKM_RSA_PKCS -- I am PKCS 1.5 encoding the input for encryption, the result I get back already is 128 bytes (RSA

Re: trying to sign data in tbird -- pkcs11

2006-10-16 Thread Christian Bongiorno
Bob, I am being asked for CKM_RSA_PKCS -- I am PKCS 1.5 encoding the input for encryption, the result I get back already is 128 bytes (RSA 1024). I am not sure how I am suppose to encode something that is already at the maximum allowed length. The input data is ASN1 encoded, so I encode and e

Re: Help on building NSPR, NSS on Windows

2006-10-16 Thread Wan-Teh Chang
[EMAIL PROTECTED] wrote: Figure that out but still encountered an error due to cygwin's style for file path. gmake[2]: Entering directory `C:/mozilla/mozilla/security/dbm/src' cl /cygdrive/c/mozilla/mozilla/security/dbm/src/../../../dbm/src/h_bigkey.c cl : Command line warning D9002 : ign

Re: Help on building NSPR, NSS on Windows

2006-10-16 Thread Wan-Teh Chang
[EMAIL PROTECTED] wrote: It turns out that the file "configure" has \r\n line terminators. I changed it and a few other script files. I see. I believe this is because you chose the "Unix files" option during the installation of Cygwin. You should have chosen the "DOS files" option. I don't

Re: Help on building NSPR, NSS on Windows

2006-10-16 Thread [EMAIL PROTECTED]
Figure that out but still encountered an error due to cygwin's style for file path. gmake[2]: Entering directory `C:/mozilla/mozilla/security/dbm/src' cl /cygdrive/c/mozilla/mozilla/security/dbm/src/../../../dbm/src/h_bigkey.c cl : Command line warning D9002 : ignoring unknown option '/cygd

Re: Help on building NSPR, NSS on Windows

2006-10-16 Thread [EMAIL PROTECTED]
Thanks! It turns out that the file "configure" has \r\n line terminators. I changed it and a few other script files. It now gets passed that but got an error for link link -nologo .. link: invalid option -- n Try `link --help' for more information. $ which link /usr/bin/link $ echo $PATH