Re: How to export private key in RSA format from NSS

2014-07-15 Thread Chuck Lee
Yes, but it doesn't work because it also calls PK11_ExportPrivKeyInfo() to get the RSA private key info. Now I am trying to decrypt key exported by PK11_ExportEncryptedPrivKeyInfo() with method SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC4 directly, which seems to be the most simple method

Re: SSLKEYLOGFILE always enabled

2014-07-15 Thread Ryan Sleevi
On Tue, July 15, 2014 1:11 pm, Tom Ritter wrote: > Is having it in by default useful enough to outweigh the risk? > > When the Dual_EC_DRBG news stories were blowing it, it was revealed > that you could switch to it by just changing the Windows Registry. > It's a Windows-supported backdoor - no

Re: SSLKEYLOGFILE always enabled

2014-07-15 Thread Ryan Sleevi
On Tue, July 15, 2014 1:11 pm, Tom Ritter wrote: > Is having it in by default useful enough to outweigh the risk? > > When the Dual_EC_DRBG news stories were blowing it, it was revealed > that you could switch to it by just changing the Windows Registry. > It's a Windows-supported backdoor - no

Re: SSLKEYLOGFILE always enabled

2014-07-15 Thread Tom Ritter
Is having it in by default useful enough to outweigh the risk? When the Dual_EC_DRBG news stories were blowing it, it was revealed that you could switch to it by just changing the Windows Registry. It's a Windows-supported backdoor - no malicious code needs to stay running on your system - just fl

Re: How to export private key in RSA format from NSS

2014-07-15 Thread Richard Barnes
Have you tried exporting with PK11_ExportDERPrivateKeyInfo? That's what WebCrypto uses to export keys in PKCSD#8 format: On Jul 13, 2014, at 10:48 PM, Chuck Lee wrote: > Hi all, >I am now working on supportin