Re: enabling crypto hardware for NSS

2008-07-15 Thread Nelson B Bolyard
David Sadler wrote, On 2008-07-15 09:24: > > I am trying to setup Apache2, I have enable NSS and software encryption > is working. > I looked at the doc on modutil but when I tried what I thought might > work I got this error. > webserver1:/etc/apache2 # modutil -dbdir /etc/apache2/SampleCertDBs/

Re: 3rd party ECC module + NSS integration

2008-07-15 Thread Nelson B Bolyard
David Sadler wrote, On 2008-07-15 12:49: > > I have installed > mozilla-nss-3.11-21.9.s390x.rpm > mozilla-nss-debuginfo-3.11-21.9.s390x.rpm > mozilla-nss-devel-3.11-21.9.s390x.rpm > mozilla-nss-tools-3.11-21.9.s390x.rpm > apache2-prefork-2.2.3-16.9 > and a "mod_nss-1.0.7" from cvs.fedora.redhat.c

Re: 3rd party ECC module + NSS integration

2008-07-15 Thread David Sadler
I have installed mozilla-nss-3.11-21.9.s390x.rpm mozilla-nss-debuginfo-3.11-21.9.s390x.rpm mozilla-nss-devel-3.11-21.9.s390x.rpm mozilla-nss-tools-3.11-21.9.s390x.rpm apache2-prefork-2.2.3-16.9 and a "mod_nss-1.0.7" from cvs.fedora.redhat.com this is loaded in apache via a "LoadModule nss_module

Re: 3rd party ECC module + NSS integration

2008-07-15 Thread Nelson B Bolyard
David, You seem to be describing at least two separate issues here. You didn't mention which NSS release you are testing. If you're using any NSS release other than 3.12, perhaps you are encountering https://bugzilla.mozilla.org/show_bug.cgi?id=443045

Re: enabling crypto hardware for NSS

2008-07-15 Thread David Sadler
I am trying to setup Apache2, I have enable NSS and software encryption is working. I looked at the doc on modutil but when I tried what I thought might work I got this error. webserver1:/etc/apache2 # modutil -dbdir /etc/apache2/SampleCertDBs/ -add IBM_CRYPTO_HDW -libfile /usr/lib64/libopencryp

3rd party ECC module + NSS integration

2008-07-15 Thread David Stutzman
Gentlemen, I'm trying to get NSS working with a 3rd party (Certicom) PKCS#11 library for the ultimate goal of having an ECC CA (Dogtag). I've asked on the Dogtag IRC channel and someone has told me they followed the instructions below more than once and had it working. I believe they also used a