Re: Problem with JSS on Ubuntu

2008-09-03 Thread Kyle Hamilton
The security policy of the JRE might prohibit running unsigned applets, as well. I don't know how to check on Ubuntu. -Kyle H On Wed, Sep 3, 2008 at 10:15 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Marcin T wrote > >> However when I try to run a test java applet over SSL connection, I >>

Re: Problem with JSS on Ubuntu

2008-09-03 Thread Nelson B Bolyard
Marcin T wrote > However when I try to run a test java applet over SSL connection, I > get ClassNotFound exception: > > https://www.java.com/en/download/help/testvm.xml You get an exception trying to view THAT page? If so, something's wrong with your JRE installation. Or is it another page

Re: Problem with JSS on Ubuntu

2008-09-03 Thread Marcin T
Just want to mention that this page works ok: https://jogl-demos.dev.java.net/applettest.html (applet is signed) But as I said if applet is not signed and page is authenticated then I get ClassNotFound exception. Best, Marcin ___ dev-tech-crypto mailin

Re: Problem with JSS on Ubuntu

2008-09-03 Thread Marcin T
Hi Thanks vm for quick response. An applet works ok when opening not encrypted page (no problems with http) Problems start when page is encrypted and authenticated and applet is not signed (when signed I have noticed that it runs ok) - then I get class not found exception. I've tried to switch

Re: Problem with JSS on Ubuntu

2008-09-03 Thread Glen Beasley
hi, You only need to install JSS if your applet or the applet you want to use requires JSS. Getting the following URL (you specified) to display correctly over SSL in FF3 does not require JSS https://www.java.com/en/download/help/testvm.xml The SSL connection and applet do not use JSS, so thi

Problem with JSS on Ubuntu

2008-09-03 Thread Marcin T
Hello I am trying to solve a problem with java applet authentication on Ubuntu AMD64 in Firefox 3.0 32bit with Java 1.6 32bit. This distro doesn't come with JSS package (it took a lot of googling to actually understand this issue), so I had to install files by hand. I can see that installation w

Re: NSS support for RFC2898 / PBKDF2

2008-09-03 Thread Robert Relyea
Graham Leggett wrote: Hi all, Does NSS support RFC2898 (derivation of keys from a passphrase), and if so, what set of functions should I be looking at to use this? Yes, The standard NSS PBE interface supports PBKDF2 automatically on reading if the algid specifying the PBE is PBEDKF2. On genera

Re: NSS equivalent of OpenSSL's EVP_CipherUpdate

2008-09-03 Thread Robert Relyea
Graham Leggett wrote: Robert Relyea wrote: "Newer applications should use more standard algorithms such as PKCS#5 v2.0 for key derivation." I am assuming NSS supports PKCS#5 v2, what functions should I be looking at to achieve this? Ah, It's a PBE algorithm. That is a perfectly acceptable w

Re: Extracting RSA keys from internal database

2008-09-03 Thread Nelson B Bolyard
Paco wrote, On 2008-09-03 03:33: > How could I build with NSS a pkcs8 object which was treatable by > openssl? You don't. You create a PKCS#12 file (also known as a "pfx" file) that contains both the private key and the cert(s). OpenSSL can handle files of that format. _

Re: WISeKey root CA certificate inclusion request

2008-09-03 Thread Kevin Blackman
Frank Hecker <[EMAIL PROTECTED]> wrote in news:[EMAIL PROTECTED]: > WISeKey has applied to add its (one) root CA certificate to the > Mozilla root store, as documented in the following bug: > >https://bugzilla.mozilla.org/show_bug.cgi?id=371362 > > and in the pending certificates list here:

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-03 Thread Suresh Kumar J
I checked with Tomcat developers about this issue and they mentioned that this is an issue with the Harmony JRE. Now am trying to contact the Harmony JRE developers for further analysis. Michael Ströder wrote: Suresh Kumar J wrote: You are correct that Apache Tomcat web-server(v6.

NSS support for RFC2898 / PBKDF2

2008-09-03 Thread Graham Leggett
Hi all, Does NSS support RFC2898 (derivation of keys from a passphrase), and if so, what set of functions should I be looking at to use this? Regards, Graham -- smime.p7s Description: S/MIME Cryptographic Signature ___ dev-tech-crypto mailing list

Re: NSS equivalent of OpenSSL's EVP_CipherUpdate

2008-09-03 Thread Graham Leggett
Robert Relyea wrote: How do I set up the symmetrical key, cipher and digest for PK11_CipherOp to replace the OpenSSL EVP_BytesToKey function? That would be PK11_ImportSymKey(). NOTE: this function is available mostly for compatiblity, it will not work in all cases (hardware tokens, for instanc

Extracting RSA keys from internal database

2008-09-03 Thread Paco
Hi. I'm developing a component where i need to import/export Certificates and RSA keys from Firefox's internal database, and I need them in a format which could be treated with OpenSSL. I've currently managed to extract the certificate in DER format and I'm also extracting the ciphered key, using

Re: FireFox v3.0.1 of Windows uses SSLv2 Record Layer even when SSLv2 is disabled

2008-09-03 Thread Michael Ströder
Suresh Kumar J wrote: > > You are correct that Apache Tomcat web-server(v6.0.13) choked with the > full set of cipher suites implemented in the Windows FF3.0.1. When I > disable the following cipher suites via the "about:config" option, the > web communication started working and the server didn't