Re: Keys, Nicknames, and CK_Object_Handles

2010-01-27 Thread Robert Relyea
On 01/27/2010 03:38 PM, Kai Chan wrote: > Hi, > > From what I gather, keys are generated with matching certificates. If you mean 'when keys are generated, they have matching certs', then the answer is no. Keys are generated bare. When the cert is imported, it 'latches' on to the keys that it's rela

Keys, Nicknames, and CK_Object_Handles

2010-01-27 Thread Kai Chan
Hi, >From what I gather, keys are generated with matching certificates. If I reference existing keys in a external PKCS #11 module, I would have to use their CK_OBJECT_HANDLE. If wanted to be able to reference these external keys by nicknames, what would I use to generate certificates? Since th

Re: compile error : /bin/sh: ../../../coreconf/nsinstall/Linux2.6_x86_glibc_PTH_DBG.OBJ/nsinstall: not found

2010-01-27 Thread Nelson B Bolyard
On 2010-01-25 17:09 PST, tcma wrote: > I downloaded mozilla192 source on kbuntu 9.10 and did "make -f client.mk". > How to build incrementally at the security/nss/lib/pk11wrap directory? > This result in a compile error: > $ cd security/nss/lib/pk11wrap > $ make > Creating ../../../../dist/public/n

Re: Smart Cards and Keygen

2010-01-27 Thread Subrata Mazumdar
Hi Sudha, Yes, you can check for existence of smart card by using the nsIPK11Token.isHardwareToken() method. (http://mxr.mozilla.org/mozilla-central/source/security/manager/ssl/public/nsIPK11Token.idl#88) You can iterate of all the tokens, and check for existence of hard token a follows: f

Re: Mozilla-JSS in FIPS compliant mode

2010-01-27 Thread David Stutzman
Has anyone ever seen this or does anyone have an idea of how I can get this crypto provider to be “installed” and utilized in a fips compliant mode per sun java docs? I *thought* that JSS wasn't a JSSE implementation and you needed to write JSS specific code to do SSL sockets but I might be wro