Certificate import fails with "already exists on the security device"

2007-01-04 Thread martin . wilck
Hi, [I erroneously posted this message on netscape.public.mozilla.crypto before] I have tried a number of things to make Thunderbird import a certificate and key, with no success. Originally it was in PKCS12 format, issued by my organization as my personal certificate. Whenever I try to import it

JSS dll dependencies -- nspr4.dll and libnspr4.dll

2007-01-04 Thread Steve Mitchell
It is confusing deploying JSS on Windows XP. The library jss4.dll depends on libnspr4.dll, not nspr4.dll as is installed with Firefox. Other dependent libraries such as nss3.dll depend on nspr4.dll. Should I copy and rename nspr4.dll to libnspr4.dll, or are these supposed to be different lib

Re: does one need secmod.db to retain his old certs?

2007-01-04 Thread Wan-Teh Chang
Arshad Noor wrote: Out of curiousity, what is that file of encrypted passwords called, Nelson? I thought the passwords were stored in key3.db too. The Triple DES key used to encrypt the passwords is stored in key3.db. That Triple DES key is stored encrypted with the master password. The encr

Re: does one need secmod.db to retain his old certs?

2007-01-04 Thread Nelson B
Arshad Noor wrote: > Nelson B wrote: > >> FF users who are trying to copy those files from one "profile" to another >> should copy the cert and key DBs and also the file of encrypted passwords, >> but not secmod.db. >> > Out of curiousity, what is that file of encrypted passwords called, > Nelson?

Re: does one need secmod.db to retain his old certs?

2007-01-04 Thread Arshad Noor
Out of curiousity, what is that file of encrypted passwords called, Nelson? I thought the passwords were stored in key3.db too. Arshad Noor StrongAuth, Inc. Nelson B wrote: FF users who are trying to copy those files from one "profile" to another should copy the cert and key DBs and also the

Re: does one need secmod.db to retain his old certs?

2007-01-04 Thread Wan-Teh Chang
cert8.db and key3.db are used by the NSS softoken. They should be moved together. secmod.db is used by the NSS pk11wrap layer, which manages multiple PKCS #11 tokens, including the NSS softoken. So secmod.db is independent of cert8.db and key3.db. secmod.db is at a higher layer. In that layer

Re: does one need secmod.db to retain his old certs?

2007-01-04 Thread Nelson B
David Stutzman wrote: > Biswatosh wrote: >> A small question. Suppose one NSS user migrates to another >> application of NSS and wants to retain his certs and keys kept in >> the cert and key database (cert8.db and key3.db) of the first >> application. Is it enough then, to just copy these tw

Re: does one need secmod.db to retain his old certs?

2007-01-04 Thread David Stutzman
Biswatosh wrote: A small question. Suppose one NSS user migrates to another application of NSS and wants to retain his certs and keys kept in the cert and key database (cert8.db and key3.db) of the first application. Is it enough then, to just copy these two files and not secmod.db ? Or, he

does one need secmod.db to retain his old certs?

2007-01-04 Thread Biswatosh
A small question. Suppose one NSS user migrates to another application of NSS and wants to retain his certs and keys kept in the cert and key database (cert8.db and key3.db) of the first application. Is it enough then, to just copy these two files and not secmod.db ? Or, he needs the secm

Re: a server application using NSS

2007-01-04 Thread Yahel Zamir
Wan-Teh Chang wrote: Yahel Zamir wrote: selfserv uses SECU_Strerror, but this is a private function. in addition, on my machine it does not find an error string for -8174, for example. Could you find out why? -8174 is SEC_ERROR_BAD_DATABASE, a common error code. SEC_ERROR_BAD_DATABASE is

Centos 4.2 multi languages support

2007-01-04 Thread Alexis MUNYANDEKWE
Hello everybody I am working with Centos 4.2 server and I want it to display european languages (french, swedish,german) and east asian language (chinese,korean,japanese) through the console. I have actually installed all necessary fonts and files written in those languages can be displayed corr

Re: certificate and certutil questions

2007-01-04 Thread Nelson B
Yahel Zamir wrote: > Hi Everyone, > > Our company develops a server to be deployed at customer sites, and we > would like to use NSS to authenticate client connections. As a start, we > can setup a CA sign our own certificates. > > I tried to follow the instructions in the SSL Reference chapter "Ge