Re: some NSS_Initialize() questions

2009-09-12 Thread Guenter
Hi Nelson, thanks for your quick reply! Am 13.09.2009, 01:30 Uhr, schrieb Nelson Bolyard : On 2009-09-12 09:23 PDT, Guenter wrote: Then I've seen code like: rv = NSS_Initialize(certDir, NULL, NULL, "secmod.db", NSS_INIT_READONLY); is it really necessary to specify secmod.db with NSS_Initi

Re: some NSS_Initialize() questions

2009-09-12 Thread Nelson Bolyard
On 2009-09-12 09:23 PDT, Guenter wrote: > Hi all, > I've some questions regarding proper initializing NSS. > From what I've read newer NSS now supports / prefers SQLite cert databases: Supports: yes Prefers: I would say no. NSS must be explicitly instructed to use the new SQLite3 databases in ea

Re: Rus GOST 89

2009-09-12 Thread Nelson B Bolyard
On 2009-09-12 03:52 PDT, Martin Paljak wrote: > > On 12.09.2009, at 2:43, Nelson Bolyard wrote: >> 3. The PKCS#11 crypto API standard must be amended to have one or more >> "mechanisms" defined for doing GOST encryption and decryption in CBC >> mode. This definition must be proposed to the PK

some NSS_Initialize() questions

2009-09-12 Thread Guenter
Hi all, I've some questions regarding proper initializing NSS. From what I've read newer NSS now supports / prefers SQLite cert databases: https://wiki.mozilla.org/NSS_Shared_DB_And_LINUX#Type_3_packages:_Libraries now what I need to know is when I want to open the certdb readonly and in a backw

Re: Rus GOST 89

2009-09-12 Thread Martin Paljak
On 12.09.2009, at 2:43, Nelson Bolyard wrote: 3. The PKCS#11 crypto API standard must be amended to have one or more "mechanisms" defined for doing GOST encryption and decryption in CBC mode. This definition must be proposed to the PKCS#11 ("cryptoki") working group as a proposed amendme