Re: Accessing Firefox keystore

2015-01-12 Thread Opa114
Am Montag, 12. Januar 2015 18:51:51 UTC+1 schrieb helpcrypto helpcrypto: > This is the dependency lack ;) > > This is what I have, probably some have changed: > > String[] nssDeps = { > //WARNING: Order MATTERS! > System.mapLibraryName("msvcr100"), > Sy

Re: best practices - python-nss to serialize PEM

2015-01-12 Thread Robert Daniels
On Monday, January 12, 2015 at 12:49:36 PM UTC-5, John Dennis wrote: > On 01/12/2015 08:50 AM, robertdaniels2...@gmail.com wrote: > > I'm loading certs via python-nss, and need to serialize the format as > > x509 PEM output. I'm using a mix of python-nss and openssl. > > > > crypto.dump_certificat

Re: Accessing Firefox keystore

2015-01-12 Thread helpcrypto helpcrypto
This is the dependency lack ;) This is what I have, probably some have changed: String[] nssDeps = { //WARNING: Order MATTERS! System.mapLibraryName("msvcr100"), System.mapLibraryName("msvcp100"), System.mapLibraryName("mozglue"),

Re: best practices - python-nss to serialize PEM

2015-01-12 Thread John Dennis
On 01/12/2015 08:50 AM, robertdaniels2...@gmail.com wrote: > I'm loading certs via python-nss, and need to serialize the format as > x509 PEM output. I'm using a mix of python-nss and openssl. > > crypto.dump_certificate does not take a nss.Certificate parameter, so > looking for what is the "best

Apache server and NSS db config issue

2015-01-12 Thread Robert Daniels
I posted this same question in the Apache group, but it's a hybrid of Apache+NSS. We changed our NSS database to use the newer sqlite certificate store. We modified wsgi-sfapi.conf from: NSSCertificateDatabase /etc/httpd/alias to NSSCertificateDatabase sql:/etc/httpd/alias Restarting the se

best practices - python-nss to serialize PEM

2015-01-12 Thread robertdaniels2009
I'm loading certs via python-nss, and need to serialize the format as x509 PEM output. I'm using a mix of python-nss and openssl. crypto.dump_certificate does not take a nss.Certificate parameter, so looking for what is the "best practices" path to achieve this. Robert -- dev-tech-crypto mail

Re: Accessing Firefox keystore

2015-01-12 Thread Opa114
i tried it but get another error: Caused by: java.io.IOException: modul not found - C:/Users/Matthias/AppData/Local/Temp/softokn3.dll but the file is in this folder. Where is the problem? -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tec

Re: Accessing Firefox keystore

2015-01-12 Thread Opa114
okay i will try it by copy the files to %temp% and then try to load it up. What are the exact dependencies which i have to copy? i've read so many different.. :( i'm using JDK 1.8.0_25 for compiling my code. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla

Re: Accessing Firefox keystore

2015-01-12 Thread helpcrypto helpcrypto
In fact, to be more funny, JRE8 has another bug (IIRC on XP) where spaces ' ' aren't neither allowed! Regards. On Mon, Jan 12, 2015 at 2:34 PM, helpcrypto helpcrypto wrote: > To sum up: It's a Java bug. Consider copying softkn and dependencies to > %temp% > > It only accepts "elemental characte

Re: Accessing Firefox keystore

2015-01-12 Thread helpcrypto helpcrypto
To sum up: It's a Java bug. Consider copying softkn and dependencies to %temp% It only accepts "elemental characters" ie: not '(', neither 'รก'... On Mon, Jan 12, 2015 at 2:25 PM, Opa114 wrote: > hi again, > > yeah i googled the last days very much about this topic. so i found out > the best sol

Re: Accessing Firefox keystore

2015-01-12 Thread Opa114
hi again, yeah i googled the last days very much about this topic. so i found out the best solution for me would be so access the softokn3.dll with PKCS#11 Provider in java. i tried a little bit and wrote a small code. but it does not work. i got the Error parsing configuration, Unexpected tok

Re: Accessing Firefox keystore

2015-01-12 Thread helpcrypto helpcrypto
Hi If you want to work with cert8, even from Java, consider using certutil (via running a command). If you want to sing with a locally-installed X509 (keys are stored on key3.db), I still consider using SunPKCS#11 for attacking softkn3 your best option. Regards On Sat, Jan 10, 2015 at 2:46 AM