Re: [ANNOUNCE] NSS 3.28.3 Release

2017-02-24 Thread Andrew Cagney
On 17 February 2017 at 08:52, Kai Engert wrote: > > SECKEYECPublicKey had been extended with a new attribute, named "encoding". If > an application passed type SECKEYECPublicKey to NSS (as part of > SECKEYPublicKey), the NSS library read the uninitialized attribute. With this > NSS release SECKEYE

PK11_Derive CKM_CONCATENATE_BASE_AND_KEY fails when KEY is from from CKM_ECDH1_DERIVE

2017-02-24 Thread Andrew Cagney
I'm trying to understand why the PK11_Derive call: CK_OBJECT_HANDLE key_handle = PK11_GetSymKeyHandle(key); SECItem key_param = { .data = (unsigned char*)&key_handle, .len = sizeof(key_handle) }; CK_ATTRIBUTE_TYPE operation = CKA_DERIVE; int key_size = 0; PK

Re: Should PK11_Derive() save the failure status?

2017-02-24 Thread Andrew Cagney
I created https://bugzilla.mozilla.org/show_bug.cgi?id=1342434 On 22 February 2017 at 16:23, Robert Relyea wrote: > On 02/22/2017 10:44 AM, Andrew Cagney wrote: >> >> Hi, >> >> I've got a PK11_Derive() call failing (presumably something silly on >> my part), but frustratingly, PORT_GetError() jus