Re: NSS tag update plans?

2007-10-19 Thread Nelson B
Wan-Teh Chang wrote: > On 10/19/07, Boris Zbarsky <[EMAIL PROTECTED]> wrote: >> Is there any public info on what the plans are on updating the trunk NSS tag >> to >> pull in the codesize improvements made recently? Or has it already happened? > > The trunk NSS tag has already been updated in moz

Re: NSS tag update plans?

2007-10-19 Thread Wan-Teh Chang
On 10/19/07, Boris Zbarsky <[EMAIL PROTECTED]> wrote: > Is there any public info on what the plans are on updating the trunk NSS tag > to > pull in the codesize improvements made recently? Or has it already happened? The trunk NSS tag has already been updated in mozilla/client.mk, rev. 1.351. ht

Re: Decryption using public key

2007-10-19 Thread David E. Ross
On 10/19/2007 9:49 AM, Wan-Teh Chang wrote: > On 10/19/07, David E. Ross <[EMAIL PROTECTED]> wrote: >> On 10/19/2007 5:35 AM, [EMAIL PROTECTED] wrote: >>> I am currently trying to convert from OpenSSL to NSS (seemed like a good >>> idea at the time). The code that I currently have an issue with i

NSS tag update plans?

2007-10-19 Thread Boris Zbarsky
Is there any public info on what the plans are on updating the trunk NSS tag to pull in the codesize improvements made recently? Or has it already happened? Once it happens, I'd like to look at the remaining codesize issues, if any, so it would be nice if this code ended up on trunk for wider t

Thawte freemail interface and .spc file

2007-10-19 Thread Michael Helm
A couple of us have had the pleasure of experimenting with the Thawte freemail cert generation pages on Microsoft Vista ... I'll skip the IE 7 problems. The Mozilla firefox generation works, but Thawte isn't returning the certificate in a form that firefox understands apparently, it comes back a

Re: Decryption using public key

2007-10-19 Thread Wan-Teh Chang
On 19 Oct 2007 13:17:53 -0700, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > I know that you suggest PK11_PubEncryptRaw but I am trying to > decrypt. You are trying to verify an RSA signature (by decrypting it with the public key). RSA public and private keys can be used symetrically. The mat

Re: Decryption using public key

2007-10-19 Thread alan . morris
On Oct 19, 1:35 pm, [EMAIL PROTECTED] wrote: > I am currently trying to convert from OpenSSL to NSS (seemed like a good > idea at the time). The code that I currently have an issue with is > essentially ... > > key=RSA_new(); > if (key) { > key->n=BN_bin2bn(IssPubKey,IssPubKeyLgth,NULL);

Re: Decryption using public key

2007-10-19 Thread alan . morris
On Oct 19, 3:17 pm, "Wan-Teh Chang" <[EMAIL PROTECTED]> wrote: > On 10/19/07, [EMAIL PROTECTED] > > > > > > <[EMAIL PROTECTED]> wrote: > > I am currently trying to convert from OpenSSL to NSS (seemed like a good > > idea at the time). The code that I currently have an issue with is > > essentiall

Re: Decryption using public key

2007-10-19 Thread a_d . morris
On Oct 19, 2:38 pm, David Stutzman wrote: > [EMAIL PROTECTED] wrote: > > I am currently trying to convert from OpenSSL to NSS (seemed like a good > > idea at the time). > > Most here would argue it's a good idea :). > > That's a fairly small look at the code. What is it that you are > actually tr

Re: Decryption using public key

2007-10-19 Thread Wan-Teh Chang
On 10/19/07, David E. Ross <[EMAIL PROTECTED]> wrote: > On 10/19/2007 5:35 AM, [EMAIL PROTECTED] wrote: > > I am currently trying to convert from OpenSSL to NSS (seemed like a good > > idea at the time). The code that I currently have an issue with is > > essentially ... > > > > key=RSA_new();

Re: PKCS12 problem with JSS (more info)

2007-10-19 Thread David Stutzman
Per Nelson and Glen I filed https://bugzilla.mozilla.org/show_bug.cgi?id=400404. I know you said there are 2 separate issues but I think the first issue (incompatible PKCS12 files) is caused by the second (salt sizes for PBEAlgs) so I only filed the one bug. Based on my testing I think as l

Re: Decryption using public key

2007-10-19 Thread David E. Ross
On 10/19/2007 5:35 AM, [EMAIL PROTECTED] wrote: > I am currently trying to convert from OpenSSL to NSS (seemed like a good > idea at the time). The code that I currently have an issue with is > essentially ... > > key=RSA_new(); > if (key) { > key->n=BN_bin2bn(IssPubKey,IssPubKeyLgth,N

Re: Decryption using public key

2007-10-19 Thread Wan-Teh Chang
On 10/19/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > I am currently trying to convert from OpenSSL to NSS (seemed like a good > idea at the time). The code that I currently have an issue with is > essentially ... > > key=RSA_new(); > if (key) { > key->n=BN_bin2bn(IssPubKey,IssPubKe

Re: Decryption using public key

2007-10-19 Thread David Stutzman
[EMAIL PROTECTED] wrote: > I am currently trying to convert from OpenSSL to NSS (seemed like a good > idea at the time). Most here would argue it's a good idea :). That's a fairly small look at the code. What is it that you are actually trying to accomplish with the crypto code? How did you e

Decryption using public key

2007-10-19 Thread alan . morris
I am currently trying to convert from OpenSSL to NSS (seemed like a good idea at the time). The code that I currently have an issue with is essentially ... key=RSA_new(); if (key) { key->n=BN_bin2bn(IssPubKey,IssPubKeyLgth,NULL); key->e=BN_bin2bn(PubKeyExponent->value,PubKeyExponen

Re: PKCS12 problem with JSS (more info)

2007-10-19 Thread David Stutzman
Nelson B wrote: > The first issue is (apparently) that PKCS#12 files created with JSS > that use an algorithm other than PBE_SHA1_DES3_CBC are unreadable by > OpenSSL. The bug should be filed against JSS. Please include code > and steps by which the problem can be reproduced. Do I hardcode a key