Re: Creating digital signature with JS in Firefox?

2010-02-03 Thread John J. Barton
Nelson B Bolyard wrote: On 2010/02/03 08:04 PST, John J. Barton wrote: Kyle Hamilton wrote: I believe there's something available called KeyManager that should help, from https://addons.mozilla.org/en-US/firefox/addon/4471 . It uses XPCOM IDL to access the platform security module. (It also h

Re: Creating digital signature with JS in Firefox?

2010-02-03 Thread Nelson B Bolyard
On 2010/02/03 08:04 PST, John J. Barton wrote: > Kyle Hamilton wrote: >> I believe there's something available called KeyManager that should >> help, from https://addons.mozilla.org/en-US/firefox/addon/4471 . It >> uses XPCOM IDL to access the platform security module. (It also has >> an explicit

Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB)

2010-02-03 Thread Wan-Teh Chang
Hi Anna, I am not familiar with JKS keystore, so I'm afraid that I can't help much. It seems that exporting the private keys and associated certificates from JKS keystore into PKCS #12 files, and importing the PKCS #12 files into the NSS cert/key databases is the best approach. I hope that with D

Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB)

2010-02-03 Thread Anna Gellatly
All - I have a bit more information on this ... I have trust keys and private keystores in JKS I need to migrate. When dropping the alias it seems to default to "appserver" - it is possible there is no alias defined for the key? Anyway - when I drop the -srcalias flag and try to import my key I g

Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB)

2010-02-03 Thread Anna Gellatly
Thanks for the info David . When I run this command:  /usr/java/current/bin/keytool -importkeystore -srckeystore /proximo/config/cluster/trusted.keystore -srcalias mykkey -destkeystore test.p12 -deststoretype PKCS12 and put in the destination password and source passwords I get: keytool error:

Re: Creating digital signature with JS in Firefox?

2010-02-03 Thread John J. Barton
Kyle Hamilton wrote: I believe there's something available called KeyManager that should help, from https://addons.mozilla.org/en-US/firefox/addon/4471 . It uses XPCOM IDL to access the platform security module. (It also has an explicit .xpi signing option; I don't know if that will help, but i

Re: Converting jks to secmod.db (copying key/cert from JKS to NSS DB)

2010-02-03 Thread David Stutzman
On 2/2/2010 6:00 PM, Anna Gellatly wrote: Hello All - I'm very new to all this - forgive a potentially ignorant question. I believe have created a keystore with the following commands certutil -N -d . modutil -fips true -dbdir . So far so good... I am changing my application from using JKS