Re: PKCS12 problem with JSS (more info)

2007-10-18 Thread Nelson B
David, I agree with Glen that there are (at least) two separate issues here, and that bugs should be filed on both of them. The first issue is (apparently) that PKCS#12 files created with JSS that use an algorithm other than PBE_SHA1_DES3_CBC are unreadable by OpenSSL. The bug should be filed aga

Re: Seeking help with Mozilla/NSS compilation

2007-10-18 Thread Nelson B
David Stutzman wrote: > I can report success using VC8 (Visual C++ 2005 Express Edition), > 5.2.3790.2075.51.PlatformSDK_Svr2003R2_rtm.img and > MozillaBuildSetup-1.1.exe running on WinXP SP2. > > One snag that had me scratching my head was the make command. > Wan-Teh links to > http://www.mozi

Re: PKCS12 problem with JSS (more info)

2007-10-18 Thread Glen Beasley
hi David, you should file two bugs: JSS has different Salt size than NSS for PBE NSS appears to only handle PBE_SHA1_DES3_CBC for PKCS12 I will try to work on the bugs shortly. thanks, glen David Stutzman wrote: > David Stutzman wrote: > >> I'm generating keys in the softoken and then e

Re: error creating PKCS#12 (PFX) in FIPS mode (JSS)

2007-10-18 Thread David Stutzman
Wan-Teh Chang wrote: > Now let's go back to the JSS code. It hasn't changed since > we open-sourced it in 2000, and the comments say it is a > workaround for a bug: > http://lxr.mozilla.org/security/source/security/jss/org/mozilla/jss/pkcs11/PK11KeyGenerator.c#321 > > 321 mech = JSS_getPK11Me

Re: Seeking help with Mozilla/NSS compilation

2007-10-18 Thread Wan-Teh Chang
On 10/18/07, David Stutzman <[EMAIL PROTECTED]> wrote: > Wan-Teh Chang wrote: > > http://developer.mozilla.org/en/docs/Windows_Build_Prerequisites#MozillaBuild > > First off, thanks for posting all that info Wan-Teh. I look forward to > being able to build NSS/NSPR on windows. > > I downloaded Moz

Re: Seeking help with Mozilla/NSS compilation

2007-10-18 Thread David Stutzman
I can report success using VC8 (Visual C++ 2005 Express Edition), 5.2.3790.2075.51.PlatformSDK_Svr2003R2_rtm.img and MozillaBuildSetup-1.1.exe running on WinXP SP2. One snag that had me scratching my head was the make command. Wan-Teh links to http://www.mozilla.org/projects/security/pki/nss/ns

Re: Seeking help with Mozilla/NSS compilation

2007-10-18 Thread Nelson B
David Stutzman wrote: > Wan-Teh Chang wrote: >> http://developer.mozilla.org/en/docs/Windows_Build_Prerequisites#MozillaBuild > > First off, thanks for posting all that info Wan-Teh. I look forward to > being able to build NSS/NSPR on windows. > > I downloaded MozillaBuildSetup-1.1.exe and the

Re: Seeking help with Mozilla/NSS compilation

2007-10-18 Thread Nelson B
e.kabarie wrote: > Could you please tell me which files are required for the proper > compilation of the project? I gather you're trying to build the code as an MSVC "project", rather than using the makefiles that come with NSPR. We don't support that. Once built, the NSPR headers and shared lib

Re: Seeking help with Mozilla/NSS compilation

2007-10-18 Thread David Stutzman
Wan-Teh Chang wrote: > http://developer.mozilla.org/en/docs/Windows_Build_Prerequisites#MozillaBuild First off, thanks for posting all that info Wan-Teh. I look forward to being able to build NSS/NSPR on windows. I downloaded MozillaBuildSetup-1.1.exe and the disc images for Visual C++ 2005 Ex

Re: PKCS12 problem with JSS (more info)

2007-10-18 Thread David Stutzman
David Stutzman wrote: > I'm generating keys in the softoken and then exporting them to PKCS12 > files with their freshly issued certs. I get the private key using the > getEncryptedPrivateKeyInfo method of CryptoStore. > > This epki is reporting a 16 byte salt but when I ask the algorithm for