Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
i searched a little bit around and looked into the Mozilla dll's and i found out that the Built-In Trusted Root CAs are in the "nssckbi.dll", so i changed my code to load this dll in libary in the config instead of the softokn3.dll. Programm runs and got no error, but the Size is zero. Any idea

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
the link to Oracle Docu did not contain detailed information to all the arguments. yes, Personal works. a way without certutil os not possible? -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
On Tue, Jan 13, 2015 at 7:18 PM, Opa114 wrote: > Am Dienstag, 13. Januar 2015 19:04:28 UTC+1 schrieb helpcrypto helpcrypto: > > Thats your mistake: > > > > Using softokn+slot=2 will access your personal/installed certificates, > not > > CA/trusted ones. > > Perhaps slot 1 will do, but I have neve

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
Am Dienstag, 13. Januar 2015 19:04:28 UTC+1 schrieb helpcrypto helpcrypto: > Thats your mistake: > > Using softokn+slot=2 will access your personal/installed certificates, not > CA/trusted ones. > Perhaps slot 1 will do, but I have never tried. > > > > On Tue, Jan 13, 2015 at 5:19 PM, Opa114 w

Re: Using JSS SSLSocket and and SSLServerSocket TLS 1.1 and 1.2

2015-01-13 Thread helpcrypto helpcrypto
On Mon, Jan 12, 2015 at 11:10 PM, wrote: > Folks, > > Sorry for the totally newbie question but I've hunted high and low. > > I am supporting some Java code that uses JSS4, NSS to provide SSL Server > side services. > > In response to Poodle I've been looking this code and was able to Enable > TL

Re: best practices - python-nss to serialize PEM

2015-01-13 Thread David Woodhouse
On Tue, 2015-01-13 at 12:25 -0500, John Dennis wrote: > On 01/13/2015 09:58 AM, Robert Daniels wrote: > > I also need to serialize private keys in the same fashion. Any hints > greatly appreciated. > > By design NSS prohibits access to private keys therefore you cannot > serialize private keys.

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
Thats your mistake: Using softokn+slot=2 will access your personal/installed certificates, not CA/trusted ones. Perhaps slot 1 will do, but I have never tried. On Tue, Jan 13, 2015 at 5:19 PM, Opa114 wrote: > i mean the Server and CA not only own Certificates > -- > dev-tech-crypto mailing li

Re: Using JSS SSLSocket and and SSLServerSocket TLS 1.1 and 1.2

2015-01-13 Thread Robert Relyea
On 01/13/2015 09:18 AM, Christina Fu wrote: jss-4.2.6-35 can be found on koji for various supported fedora platforms. For rhel it's the same version number. Christina Are there any outside available builds, like windows? bob On 01/13/2015 09:09 AM, Robert Relyea wrote: Christina, which ve

Re: best practices - python-nss to serialize PEM

2015-01-13 Thread John Dennis
On 01/13/2015 09:58 AM, Robert Daniels wrote: > I also need to serialize private keys in the same fashion. Any hints greatly > appreciated. By design NSS prohibits access to private keys therefore you cannot serialize private keys. However, you can export a cert/key pair in PKCS12 format. See n

Re: Using JSS SSLSocket and and SSLServerSocket TLS 1.1 and 1.2

2015-01-13 Thread Robert Relyea
Christina, which version of JSS has TLS 1.1 and 1.2 support enabled? Bob On 01/12/2015 02:10 PM, deepr...@gmail.com wrote: Folks, Sorry for the totally newbie question but I've hunted high and low. I am supporting some Java code that uses JSS4, NSS to provide SSL Server side services. In res

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
i mean the Server and CA not only own Certificates -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Using JSS SSLSocket and and SSLServerSocket TLS 1.1 and 1.2

2015-01-13 Thread deepreel
Folks, Sorry for the totally newbie question but I've hunted high and low. I am supporting some Java code that uses JSS4, NSS to provide SSL Server side services. In response to Poodle I've been looking this code and was able to Enable TLS explicitly and disable SSL to mitigate that in it's mos

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
thanks! I tried your code and it works. i had only to chnge the "Program Files" to "Program Filex (x86)" but now it works. I compared your code with mine. And there was only one Difference. And this difference was it. You use "C:\\Windows\\Temp\\softokn\\" as TEMP-Dir. I used "C:\\Users\\Name\\

Re: best practices - python-nss to serialize PEM

2015-01-13 Thread Robert Daniels
Basically what I'm doing is pulling from the nss store, the private key, server cert, and the complete CA cert chain and converting to in-memory PEM. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: best practices - python-nss to serialize PEM

2015-01-13 Thread Robert Daniels
I also need to serialize private keys in the same fashion. Any hints greatly appreciated. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
This one is working: http://pastebin.com/qqPf4cvM Regards On Tue, Jan 13, 2015 at 12:29 PM, Opa114 wrote: > Am Dienstag, 13. Januar 2015 12:14:28 UTC+1 schrieb helpcrypto helpcrypto: > > On Tue, Jan 13, 2015 at 12:00 PM, Opa114 wrote: > > > > > thanks again. i have compared my code woth your p

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
Am Dienstag, 13. Januar 2015 12:14:28 UTC+1 schrieb helpcrypto helpcrypto: > On Tue, Jan 13, 2015 at 12:00 PM, Opa114 wrote: > > > thanks again. i have compared my code woth your peace of code you posted > > and i have the same. But i still get the Error: CKR_DEVICE_ERROR > > > CKR_DEVICE_ERROR i

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
On Tue, Jan 13, 2015 at 12:00 PM, Opa114 wrote: > thanks again. i have compared my code woth your peace of code you posted > and i have the same. But i still get the Error: CKR_DEVICE_ERROR > CKR_DEVICE_ERROR is an error on the cryptoki itself, as stated by PKCS#11 standard. I have found several

Re: Accessing Firefox keystore

2015-01-13 Thread Opa114
thanks again. i have compared my code woth your peace of code you posted and i have the same. But i still get the Error: CKR_DEVICE_ERROR i loaded the dll's in your posted order. i copied the dll's to C:\users\myname\AppData\Local\Temp Folder. the Mozilla Profile folder is right, too. so don't

Re: Accessing Firefox keystore

2015-01-13 Thread helpcrypto helpcrypto
Hi Again Matthias Copy softkn+dependencies to %temp%, load libraries in Java using System.load (also in order!) and then try to use sunpkcs11 with the following config: String config = "name = NSS\r\n" + "library = " + path + "\r\n" + "attributes = compatibility\r\n" + "showInfo = false\r\n" + "