Re: PK11_Verify vs. VFY_VerifyDigest

2007-03-28 Thread Nelson Bolyard
Wan-Teh Chang wrote: > As I pointed out above, the PKCS #11 token also handles verifying > RSA signatures. The only difference between the handling of RSA > and DSA/ECDSA signatures is when we call PK11_xxx and whether > we call PK11_VerifyRecover or PK11_Verify. (PK11_VerifyRecover > doesn't ma

Re: PK11_Verify vs. VFY_VerifyDigest

2007-03-28 Thread Wan-Teh Chang
On 27 Mar 2007 19:43:13 -0700, Peter Djalaliev <[EMAIL PROTECTED]> wrote: > Hello, > > When I had a problem with verifying a RSA signtaure, I was hinted by > Bob Releya that the VFY_* functions are better to use than PK11_Verify > when trying to verify a signature given the digest of what was > act

Re: Running certutil gave cert, but pkcs12 complains

2007-03-28 Thread Nelson Bolyard
Jana Nguyen wrote: > Now, when I ran certutil to check my database, it showed my cred in the db: > C:\Program Files\nss-3.11.4\bin>certutil -L -d "C:\Documents and > Settings\jnguyen\Application Data\Mozilla\Firefox\Profiles\piz4f90u.default" > > Jana Nguyen's Brandmail Solutions, Inc. ID

Re: getting cred(pkcs12) out of mozilla?

2007-03-28 Thread Nelson Bolyard
Jana Nguyen wrote: > > I've got NSS release installed on my windows, but when I run > > pk12util.exe to export the credential out of mozilla, I get following > > error "pk12util.exe: find user certs from nickname failed: security > > library: bad database" : The "Bad database" error generally mea

Running certutil gave cert, but pkcs12 complains

2007-03-28 Thread Jana Nguyen
Hi Peter, First I fixed the missing nspr libs, thanks. Now, when I ran certutil to check my database, it showed my cred in the db: C:\Program Files\nss-3.11.4\bin>certutil -L -d "C:\Documents and Settings\jnguye n\Application Data\Mozilla\Firefox\Profiles\piz4f90u.default" Jana Nguyen's Brandm

Re: Mozilla certificate database on windows?

2007-03-28 Thread Peter Djalaliev
Jana, These dynamic libraries are NSPR libraries and I'm surprised that they are not part of the NSS release. You can get a NSPR release from: ftp://ftp.mozilla.org/pub/mozilla.org/nspr/releases I guess you downloaded a pre-compiled NSS package, right? If you compile NSS from scratch, I think yo

Re: Mozilla certificate database on windows?

2007-03-28 Thread Jana Nguyen
Hi Peter, I finally ound my keys under C:\Documents and Settings\\Application Data\Mozilla\Firefox\Profiles\, thanks ! The issue now is that when I run the pkcs12util it keeps complaining about missing nspr4.dll and plc4.dll, etc. libraries. I can download one by one, but now sure how long this

Re: Mozilla certificate database on windows?

2007-03-28 Thread Jana Nguyen
The certutil did not work for displaying db or cert since it complains I have error on my db. Hmm, I never created a mozilla db using the certutil because I assume it was automatically generated for me when I got a cert from my CA via the mozilla browser? But when I did a search on my hard disk t

Re: Mozilla certificate database on windows?

2007-03-28 Thread Peter Djalaliev
> > But when I did a search on my hard disk there > was no cert8.db, cert3,key and secmod.db files. The second file should actually be key3.db, I corrected myself in a later post. Anywyas, I've tried to manually create the mozilla cert db by using > certutil -d "C:\Program Files\Mozilla Firefox\

Re: Mozilla certificate database on windows?

2007-03-28 Thread Peter Djalaliev
> cert3.key and secmod.db (certificate db, key db, security module) I meant key3.db, cert8.db and secmod.db Regards, Peter ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Mozilla certificate database on windows?

2007-03-28 Thread Peter Djalaliev
Jana, I found mine at: C:\Documents and Settings\\Application Data\Mozilla \Firefox\Profiles\ Whatever the directory is, you need the following files: cert8.db, cert3.key and secmod.db (certificate db, key db, security module) Regards, Peter ___ dev-

Re: getting cred(pkcs12) out of mozilla?

2007-03-28 Thread Peter Djalaliev
> > p.s. The certname is the credential Name in my cert? Hm, usually it is not, but I am not sure. You can use the "certutil" NSS utility to check the contents of your NSS certificate database and find out the certificate nicknames. certutil's documentation is here: http://www.mozilla.org/proje

Mozilla certificate database on windows?

2007-03-28 Thread Jana Nguyen
Hi, I would like to verify where on windows is the Mozilla certificate database located at? Shouldn't there be a db file called "cert8.db and cert3.key"? I don't have these files. I got a credential in the browser issued to me by a CA. Thanks. ___ dev-

Re: getting cred(pkcs12) out of mozilla?

2007-03-28 Thread Jana Nguyen
Hi Peter, I've got NSS release installed on my windows, but when I run pk12util.exe to export the credential out of mozilla, I get following error "pk12util.exe: find user certs from nickname failed: security library: bad database" : : C:\Program Files\nss-3.11.4\bin>pk12util.exe -o jnguyen.p12 -

Re: Unbelievable behavior from Mozilla browser for User Identification

2007-03-28 Thread Nelson Bolyard
mckenna_vc wrote: > Browser: Mozilla 1.7 > OS : Sun Solaris 10 > > I cant believe this User Identification request Dialog is prompting many > times, around 20 times evnthough you give the valid certificate. Cool! A new record! > If you enable the Edit->Preferances->Privacy and Security ->Certif

Re: getting cred(pkcs12) out of mozilla?

2007-03-28 Thread Peter Djalaliev
Jana, If you look in the JSS Release directory, JSS 3.4 has a pre-compiled release for Linux2.4, as well as source code. JSS 4.2 has pre-compiled releases for Linux 2.4 and 2.6. I don't know why JSS 3.7 has only a built for the HP-UXB platform. Would these work for you? If you want to use CVS,

Unbelievable behavior from Mozilla browser for User Identification

2007-03-28 Thread mckenna_vc
Browser: Mozilla 1.7 OS : Sun Solaris 10 I cant believe this User Identification request Dialog is prompting many times, around 20 times evnthough you give the valid certificate. If you enable the Edit->Preferances->Privacy and Security ->Certificates ->Select Automaticall Option.. then if you ha

Re: getting cred(pkcs12) out of mozilla?

2007-03-28 Thread Jana Nguyen
Hi Peter, Thanks for the prompt response. I'm trying to download NSS for Java (JSS), but the latest version at ftp://ftp.mozilla.org/pub/mozilla.org/security/jss/releases/JSS_3_7_RTM/ only has HP-UXB platform where I wanted linux since I'm running fedora to test this out. At the readme file it

Re: getting cred(pkcs12) out of mozilla?

2007-03-28 Thread Peter Djalaliev
Jana, pk12util is part of the utilities that ship with a NSS release. You can find the NSS Release Directory here: ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/ You have a choice between downloading source code or pre-compiled binaries. If you download the source code, you can fin