Re: Locking reader lock

2007-08-28 Thread Nelson Bolyard
Umesh Bywar wrote: > I am having a problem in configuring a socket to do hand shake as server. I > have a socket on which some communication has already taken place. When I try > to upgrade the socket to SSL, the SSL_LOCK_READER(ss) in SSL_ResetHandshake > throws an exception and everything is abo

Re: error setting FIPS mode of DB when initializing JSS on linux

2007-08-28 Thread Glen Beasley
hi, we support RHEL4 and nightly QA and tinderbox tests on the platform. http://tinderbox.mozilla.org/showlog.cgi?log=NSS/1188333120.16322.gz&fulltext=1 David Stutzman wrote: > Wan-Teh, > > Thanks for all the advice. I checked out and compiled JSS 4.2.5 along > with NSS 3.11.4 and NSPR 4.6.4.

error setting FIPS mode of DB when initializing JSS on linux

2007-08-28 Thread David Stutzman
Wan-Teh, Thanks for all the advice. I checked out and compiled JSS 4.2.5 along with NSS 3.11.4 and NSPR 4.6.4. Unfortunately I have a new problem. As soon as I start the program on Linux I get: java.security.GeneralSecurityException: Failed to toggle FIPS mode Stack Trace: org.mozilla.js

Re: automate mozilla certificate install

2007-08-28 Thread casprd
Unfortunately the javascript isn't going to accomplish everything we need. Any suggestions on where I can find information/code snippets for the NSS crypto classes? thanks ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists

Re: error creating PKCS#12 (PFX) in FIPS mode (JSS)

2007-08-28 Thread Wan-Teh Chang
On 8/28/07, David Stutzman <[EMAIL PROTECTED]> wrote: > > I remember reading that JSS needed to be signed as it is a Java Security > Provider. Does the signature have to be from a "trusted" source or > "just signed". If the latter, we have no shortage of keys/certs here... > > So if I need to do

Re: error creating PKCS#12 (PFX) in FIPS mode (JSS)

2007-08-28 Thread David Stutzman
Wan-Teh Chang wrote: > Now let's go back to the JSS code. It hasn't changed since > we open-sourced it in 2000, and the comments say it is a > workaround for a bug: > http://lxr.mozilla.org/security/source/security/jss/org/mozilla/jss/pkcs11/PK11KeyGenerator.c#321 > > 321 mech = JSS_getPK11Me

Re: error creating PKCS#12 (PFX) in FIPS mode (JSS)

2007-08-28 Thread Wan-Teh Chang
On 8/28/07, David Stutzman <[EMAIL PROTECTED]> wrote: > I turned on FIPS mode in our JSS-using application and in the last step > of creating a PKCS#12 file I get the following token exception: > > org.mozilla.jss.crypto.TokenException: Failed to import PBA key from > PBA-generated bits This error

error creating PKCS#12 (PFX) in FIPS mode (JSS)

2007-08-28 Thread David Stutzman
I turned on FIPS mode in our JSS-using application and in the last step of creating a PKCS#12 file I get the following token exception: org.mozilla.jss.crypto.TokenException: Failed to import PBA key from PBA-generated bits at org.mozilla.jss.pkcs11.PK11KeyGenerator.generatePBE(Native Me

Locking reader lock

2007-08-28 Thread Umesh Bywar
Hi all: I am having a problem in configuring a socket to do hand shake as server. I have a socket on which some communication has already taken place. When I try to upgrade the socket to SSL, the SSL_LOCK_READER(ss) in SSL_ResetHandshake throws an exception and everything is aborted. Basica