Re: Signtool error message "No more entries..."

2007-07-30 Thread Nelson B
[EMAIL PROTECTED] wrote: Thanks for your message. It pointed out a number of all bugs in NSS. I'm going to file bug reports on each of them that I found. > I'm trying to sign Firefox plugin with a certificate. Cert is located > in .pfx file. I successfully created local db and added my cert into

Re: Mozilla/Firefox certificate import error with CKA_LABEL

2007-07-30 Thread Nelson B
Ulf Leichsenring wrote (quoting Bob Relyea): >> 1) the user has multiple certs with the same subject, but some certs >> map to different roles (evil IMHO). When Bob talks about different roles, he doesn't mean signing vs encryption. He means (for example) multiple signing certs, each with the sam

Re: PKCS11 quagmire... (JSS question) [really solved]

2007-07-30 Thread David Stutzman
Small, but important update to this...I was signing the wrong thing and missing a section of the SignerInfo. The code in the previous post generates a valid ASN.1 encoded SignerInfo, but not one that will pass its own verify method. The below code works properly. public SignerInfo createBCSig