Re: certutil,certreq

2006-11-14 Thread Biswatosh Chakraborty
Bob, Thanks for yor reply. Infact, I am working on the NSS Bug # 291383. There it proposes an option to delete an orphan key. I am able to see how to make a patch which can identify a key based on CKA_ID and then delete it also but what if I dont have a CKA_ID and even not a cert but only a

XPCOM API for Sigining of XML documents

2006-11-14 Thread Subrata Mazumdar
Hi, I would like to sign XML document in Javascript as per W3C spec for XML-Signature Syntax and Processing (http://www.w3.org/TR/xmldsig-core/). Is there any XPCOM based API for sigining XML document in Firefox> If not, is there any such tool available in the public domain? Since Firefox suppor

Re: Cleversafe-NSS technical integration questions

2006-11-14 Thread Bob Relyea
Matt England wrote: Mozilla-NSS community- We have some questions regarding the usage of your NSS/NSPR libraries with our (Cleversafe's) software. I collected these questions (from Jason Resch and Wesley Leggette) below. Please let me know if this is not an appropriate forum for these quest

Re: certdb,keydb,token

2006-11-14 Thread Bob Relyea
Nelson B wrote: jayasree bhattacharya wrote: Thanks Nelson for ur reply. My confusion is less but still there. The doubts are: a)When certutil generates keys, pvt key is stored in keydb but where is pub key stored? I am not creating any cert but just generating keys. If I recall corre

Re: certutil,certreq

2006-11-14 Thread Bob Relyea
Biswatosh wrote: As a sequel to the earlier mail about the way to extract infos from a Cert Req file, I have this to discuss. As I understand, CertReq is a PKCS 10 structure and so the min. members would be 1)Name and 2)SubjectPublicKeyInfo ,at least. Now, do we need to identify an orphan key

Re: NYT story on CleverSafe (user of NSS)

2006-11-14 Thread Matt England
Matt England, lead designer at Cleversafe here, following up on this thread: http://www.mail-archive.com/dev-tech-crypto@lists.mozilla.org/msg00775.html some of which is copied below. Yes, we gladly use Mozilla's NSS. It provides the necessary licensing we require for our GPL- and commercial-

Re: NYT story on CleverSafe (user of NSS)

2006-11-14 Thread Matt England
Fyi: We've started the following discussion thread: http://cleversafe.org/forums/viewtopic.php?t=1203 regarding potential API changes to support the things Bob mentions below. -Matt Dispersed Storage: http://cleversafe.org At 11/14/2006 10:30 AM, Matt England wrote: Bob Relyea on Mon, 21 Au

Cleversafe-NSS technical integration questions

2006-11-14 Thread Matt England
Mozilla-NSS community- We have some questions regarding the usage of your NSS/NSPR libraries with our (Cleversafe's) software. I collected these questions (from Jason Resch and Wesley Leggette) below. Please let me know if this is not an appropriate forum for these questions. Thank you in

certutil,certreq

2006-11-14 Thread Biswatosh
As a sequel to the earlier mail about the way to extract infos from a Cert Req file, I have this to discuss. As I understand, CertReq is a PKCS 10 structure and so the min. members would be 1)Name and 2)SubjectPublicKeyInfo ,at least. Now, do we need to identify an orphan key in key.db on the

certutil,cert req

2006-11-14 Thread Biswatosh
Hi, Is there a way to get the info about the pub key in a given cert req? What is the function for that? I am writing a patch for certutil so that it can delete an orphan key. Now, I have been able to modify some functions so that when we do a "cerutil -K -d db", it lists the keys along with