Re: NSS and OpenSSL BIO replacement

On Sep 21, 9:28 pm, DanKegel <[EMAIL PROTECTED]> wrote: >> What are the equivalent APIs in NSS which probably can >> replace the BIO I/O abstraction of OpenSSL ? > I have a demo program showing a BIO-like thing for NSS. Thanks to Wan-Teh for several rounds of code review on the core part of my dem

Re: nssModule=keystore problem

Robert Relyea wrote: [ output deleted]. Which means that libnssckbi.so is used for obtaing trustanchors and i dont know why. In configuration I've set that i want only access to keystore. Any ideas? Yes, the trust anchors are stored in libnssckbi.so. NSS nssckbi is the NSS cryptoki Builtin

Re: nssModule=keystore problem

[EMAIL PROTECTED] wrote: Hi, I am trying use nss for obtaining keystore with user certificates from firefox but i am ending with java.security.ProviderException: Library / home/xxx/.mozilla/firefox/16zcyg70.default/libnssckbi.so does not exist. For creating SunPKCS11 provider I've used following

Re: questions on root creation

Ian G wrote, On 2008-09-22 09:45: > Hi all, Hi Ian, This reply isn't complete. I'm just going to discuss the questions with easy answers. > * the following extended key usage fields within roots: > + Server Authentication > + Client AUthentication > + Secure Email > + ... >

Re: Generate PKCS12 not containing CA certificates

Paco wrote, On 2008-09-21 23:46: > I read the elf headers for every > shared library distributed with firefox and the symbol > SEC_PKCS12AddCertAndKey was defined, but SEC_PKCS12AddCert and > SEC_PKCS12AddKeyForCert weren't (neither the function that derives > key thumbprint from the cert). Th

questions on root creation

Hi all, CAcert is currently working up to create some new roots, as part of their audit process. They've done some research and covered parts of the requirements, but many open questions remain as to the content of a future root. http://wiki.cacert.org/wiki/Roots/NewRootsTaskForce Below is a li

Re: Re-reading certificates at runtime - Java

 Hi Glen, Thanks for the response.  I haven't had time to run the tests you suggested but hopefully this week I will be able to. > hi David,>> For JSS with SSLServerSocket if you want to do a reconnect because your > orginal cert you configured has expired> is now INVALID you would have to re-call

Re:Re-reading certificates at runtime - Java

See below for responses. David B Hinz wrote, On 2008-09-11 09:13: >> We are still encountering the problem detailed below that was described by >> Steve over a year ago. >> >> Is there anyone that can provide some insight on how we can solve this >> problem? >> >> What happens is that some