Converting jks to secmod.db

2010-02-02 Thread Anna Gellatly
Hello All - I'm very new to all this - forgive a potentially ignorant question. I believe have created a keystore with the following commands certutil -N -d . modutil -fips true -dbdir . I am changing my application from using JKS to NSS's keystore implementation for FIPS compliance needs. I h

Re: Mozilla-JSS in FIPS compliant mode

2010-02-02 Thread Anna Gellatly
All - I am trying to get a fips compliant NSS java security provider installed on my system. I am having troubles getting NSS configured. I currently have the following in my configuration file name = NSS nssLibraryDirectory = /usr/lib64 nssDbMode = noDb When I start my application I get java.

Re: Mozilla-JSS in FIPS compliant mode

2010-02-02 Thread David Stutzman
On 2/1/2010 1:39 PM, Anna Gellatly wrote: Thanks for responding David - If the Mozilla JCA isn't JSS compatible then I'm barking up the wrong tree. I see you included the pkcs#11 java doc but how do you ensure sun's PKCS#11 uses nss? I see that you need to set the configuration directives - but I

Re: Creating digital signature with JS in Firefox?

2010-02-02 Thread Kyle Hamilton
I believe there's something available called KeyManager that should help, from https://addons.mozilla.org/en-US/firefox/addon/4471 . It uses XPCOM IDL to access the platform security module. (It also has an explicit .xpi signing option; I don't know if that will help, but it might be useful.) -K