Re: JSS Version 4.4

2017-08-30 Thread Elio Maldonado
> On Aug 30, 2017, at 5:59 AM, Kai Engert wrote: > > Apparently nobody had created/uploaded a release archive for that new version. > > You could obtain it by using the HG (mercurial) software, and by using the > release tag. The release notes page you mention refers to tag > JSS_4_4_20170313.

Re: How do I convert org.mozilla.jss.pkix.cert to org.mozilla.jss.crypto.X509Certificate?

2017-05-25 Thread Elio Maldonado Batiz
Hi Ernie, Not sure I fully understand the question. Without additional context is hard to give a good answer. Now, in one of the JSS tests I see code quite similar to the snippet you pasted. https://hg.mozilla.org/projects/jss/file/tip/org/ mozilla/jss/tests/ListCerts.java#l63 Hopefully studying

Re: TLS 1.2 Issue with openldap 2.4.36 built on NSS 3.15.3

2013-11-29 Thread Elio Maldonado Batiz
Firefox 27 will support TLS 1.2, see https://bugzilla.mozilla.org/show_bug.cgi?id=861266 On Fri, Nov 29, 2013 at 10:32 AM, Kurt Roeckx wrote: > On Fri, Nov 29, 2013 at 01:43:11PM +0100, Kurt Roeckx wrote: > > As far as I know, NSS does not have any ciphers with SHA-2 other > > than GCM, and so

Re: Need to use the main NSS module as a PKCS#11 module in IBM Notes

2013-09-10 Thread Elio Maldonado Batiz
Hi Kyle, nss3.dll is a not PKCS #11 module as it has no crypto, softokn3.ddl (.so) and freebl3.sll (.so) do. softoken is nss's own internal PKCS #11 cryptographic module which nss loads just like any other pkcs #11 module, software or hardware based. Good starter documents are https://developer.m

Re: NSS documentation proposal

2013-09-05 Thread Elio Maldonado Batiz
Milos, Thank for providing this, and in the form that you did so it fits in within existing documentation framework. The doc directory hierarchy could be improved slightly to segregate man pages for the tools versus man pages for system configuration files (pkcs11.txt) but that's another topic. As

How is the official for NSS in coverity?

2011-10-14 Thread Elio Maldonado
Hi all, NSS is listed as its own project and as a rung 1 project at http://scan.coverity.com/rung1.html if I understand correctly means there is an official contact for nss. I need to see the results of the nss coverity scans for nss but I must first register and be vouched for as as legitimate c

Re: nss program language

2011-07-26 Thread Elio Maldonado
On Jul 26, 7:08 am, florent ainardi wrote: > On 25 juil, 14:56, John Dennis wrote: > > > > > > > > > > > On 07/25/2011 05:08 AM, florent ainardi wrote: > > > > hi all > > > i have a doubt concerning the language of the nss library > > > i parse a sample of code given on the official website and i

Re: CKA_SIGN and CKA_VERIFY

2010-02-09 Thread Elio Maldonado
Added comments to https://bugzilla.mozilla.org/show_bug.cgi?id=490238 proposing simplifications to sample 3. -Elio -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: CKA_SIGN and CKA_VERIFY

2010-02-09 Thread Elio Maldonado
On Feb 6, 3:29 am, Shailendra N Jain wrote: >   In the sample that I am working on, I need to decrypt the mac appended > plaintext. But while verifying the MAC, I am using the below context to > call PK11_DigestFinal. > > PK11_CreateContextBySymKey(CKM_MD5_HMAC, CKA_VERIFY, mk, &noParams); Hi Sha

Re: why nss has very little doc about usage of api

2008-11-05 Thread Elio Maldonado
On Nov 4, 6:25 pm, Ken <[EMAIL PROTECTED]> wrote: > 2008/11/5 Robert Relyea <[EMAIL PROTECTED]>: > > > > > NZzi wrote: > > >> hi all: > > >> when i use nss to develop some cipher program(just > >> for local, not internet), i.e. just perform > >> miscellaneous cryptographic operations, the only > >>

Re: Unable to read PKCS#8 file generated using OpenSSL command line tool

2008-10-01 Thread Elio Maldonado Batiz
Mi comments inline Robert Relyea wrote: > Subrata Mazumdar wrote: >> Bob, >> I implemented the importing and exporting of private key from PKCS#8 >> file using NSS API. >> Here is what I found based on my testing : >> >> Using Mozilla NSS API, I can only import/export private key in PKCS#8 >> fo

Re: Unable to read PKCS#8 file generated using OpenSSL command line tool

2008-09-30 Thread Elio Maldonado
I was able to export a PKCS #8 encrypted key with either SEC_OID_DES_EDE3_CBC or SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC which OpenSSL reads, I did not try other algorithms at the. A somewhat sanitized extract of the pertinent function follows: --