Re: Fedora Crypto Consolidation

2007-09-11 Thread Arshad Noor
Steve/Bob, The problem with JSS is that there are JSS-specific calls in the code that are required to make it work; for example, the code you pointed out has the following: 107 CryptoManager.InitializationValues vals = new 108 CryptoManager.InitializationValues (dbdir ); 109

Re: Fedora Crypto Consolidation

2007-09-11 Thread Steve Parkinson
Robert Relyea wrote: > Arshad Noor wrote: >> What would be ideal is for JSS to evolve into becoming >> just another pluggable JCE Provider and hide the access >> to the consolidated Fedora crypto keystore/library >> behind that interface. You will then be doing two >> communities a great service.

Re: Fedora Crypto Consolidation

2007-09-11 Thread Robert Relyea
Arshad Noor wrote: What would be ideal is for JSS to evolve into becoming just another pluggable JCE Provider and hide the access to the consolidated Fedora crypto keystore/library behind that interface. You will then be doing two communities a great service. IIRC, JSS is a JCE provider, as w

Fedora Crypto Consolidation

2007-09-11 Thread Arshad Noor
Bob, I am gratified to see this effort on Fedora - it is sorely needed. However, there is one area of coverage that is missing in this effort: that of Java developers. As you know, Java has its own keystore and APIs for the same functions (with some limitations) that NSS offers. While Java devel

Re: hardware security module storing x509 client cert: mozilla code for loging into subversion

2007-09-11 Thread Rob Crittenden
Eddy Nigg (StartCom Ltd.) wrote: Rob Crittenden wrote: Yes, mod_nss supports the same environment variables as mod_ssl. http://directory.fedoraproject.org/wiki/Mod_nss I couldn't figure (explicit) from that page that this is the case http://directory.fedoraproject.org/docs/mod_nss.html

Re: hardware security module storing x509 client cert: mozilla code for loging into subversion

2007-09-11 Thread Jean-Marc Desperrier
Robert Relyea wrote: > It's part of the Fedora Crypto Consolidation project: > http://fedoraproject.org/wiki/FedoraCryptoConsolidation Great job ! I'm happy to see it happening. ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://l

Re: Generate Certification Request in PKCS#10 format from Browsers based on Mozilla

2007-09-11 Thread Eddy Nigg (StartCom Ltd.)
I think *openssl pkcs7* will do as well... Giacomo Pappagallo wrote: > Browsers based on Mozilla use crypto.generateCRMFRequest() to generate > Certification Request in CRMF format. > The problem is that is not possible to sign a Certification Request CRMF > using OPENSSL. > > Openssl sign certi

Re: Generate Certification Request in PKCS#10 format from Browsers based on Mozilla

2007-09-11 Thread Alexander Klink
Hi Giacomo, On Tue, Sep 11, 2007 at 10:47:41AM +0200, Giacomo Pappagallo wrote: > Openssl sign certification request in PKCS#10 format. ... or SPKAC. > Can anyone tell me how Browsers based on Mozilla can generate > Certification Request in PKCS#10 format ? Not that I know of. You can use the -T

Generate Certification Request in PKCS#10 format from Browsers based on Mozilla

2007-09-11 Thread Giacomo Pappagallo
Browsers based on Mozilla use crypto.generateCRMFRequest() to generate Certification Request in CRMF format. The problem is that is not possible to sign a Certification Request CRMF using OPENSSL. Openssl sign certification request in PKCS#10 format. Can anyone tell me how Browsers based on Moz