Re: NSS_NoDB_Init(".") and FIPS mode

On 18 March 2016 at 13:49, Robert Relyea wrote: > On 03/18/2016 09:14 AM, Andrew Cagney wrote: > >> Is it possible to put NSS (softtoken) in FIPS mode (PK11_IsFIPS()) without >> a "modutil -fips true" database? >> >> By FIPS mode I guess I really mean confirm that NSS has performed some >> sort >

Cross-Compilation of NSS for MIPS platform fails.

Hi, I have been trying to cross compile NSS 3.21 for MIPS-Linux platform, but am facing a lot of build issues. First I built nspr with mipsel toolchain and it compiled without any errors. While compiling NSS , I am getting the following error : {standard input}: Assembler messages: {standard i

Re: RFC7512 PKCS#11 URI support

> I am still strongly opposed to introducing this behaviour to the existing > functions. The nickname functions already have significant magic attached > to them, both in parsing from NSS APIs and in providing to NSS APIs > (filtering or setting the token via parsing or adding to the token name, >

NSS_NoDB_Init(".") and FIPS mode

Is it possible to put NSS (softtoken) in FIPS mode (PK11_IsFIPS()) without a "modutil -fips true" database? By FIPS mode I guess I really mean confirm that NSS has performed some sort of FIPS self-check. An earlier thread mentioned some way of toggling things using SECMOD_DeleteInternalModule()?

Re: NSS_NoDB_Init(".") and FIPS mode

On 03/18/2016 09:14 AM, Andrew Cagney wrote: Is it possible to put NSS (softtoken) in FIPS mode (PK11_IsFIPS()) without a "modutil -fips true" database? By FIPS mode I guess I really mean confirm that NSS has performed some sort of FIPS self-check. An earlier thread mentioned some way of toggli

Re: ALPN server support

Martin Thomson wrote: Yeah, NSS supports ALPN server side. Just getting back to this. I don't see how this can work. AFAICT it calls the callback function to select the protocol. The callback returns a string representing that protocol. But it has no way of setting the state of the negotiati