Re: how to create a soft token using NSS?

2010-06-11 Thread M.Hunstock
Am 11.06.2010 05:41, schrieb 蓝黑王朝: > Do you know other way that can > disable the pkcs12 certificate exporting? Use a hardware crypto token. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: NSS 3.12.6 release notes

2010-05-07 Thread M.Hunstock
Am 06.05.2010 23:22, schrieb Wan-Teh Chang: > Matthias, thank you for reporting the broken link. I went through > the NSS 3.12.5 and 3.12.6 release notes and fixed all the broken > links. I had that other problem and tried to get the source to have a look how things are done. Additionally I wa

Re: NSS 3.12.6 release notes

2010-05-06 Thread M.Hunstock
Am 05.05.2010 22:41, schrieb Christophe Ravel: > The release notes for NSS 3.12.6 are available at: > https://developer.mozilla.org/NSS_3.12.6_release_notes The link to the build instructions in the documentation section is not working. Matthias -- dev-tech-crypto mailing list dev-tech-crypto@l

Re: Classification of client certificates by NSS / Mozilla Firefox

2010-05-06 Thread M.Hunstock
Am 05.05.2010 21:28, schrieb Nelson B Bolyard: > Hopefully I've cleared that up with my explanation above. Yes you did. Thanks for the very verbose explanation. Matthias -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Classification of client certificates by NSS / Mozilla Firefox [SOLVED]

2010-05-05 Thread M.Hunstock
On 05.05.2010 11:05, M.Hunstock wrote: > In the meanwhile it appears in the correct tab, but the trust chain > cannot be built. It says something like "this certificate could not be > verified for an unknown reasen" (I have a localized version of FF). Well.. "if

Re: "Private Key is does not belong to this provider" returned when i try creating Certificate

2010-05-05 Thread M.Hunstock
Am 05.05.2010 13:02, schrieb joabelfa: > Certificate certificadoJSS = new Certificate(info, rootkey, sigAlg); > > what is the problem? where is sigAlg coming from? -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Classification of client certificates by NSS / Mozilla Firefox

2010-05-05 Thread M.Hunstock
Am 05.05.2010 12:03, schrieb Kaspar Brand: > Does the cert viewer not show any chain (under "Details"), or is it just > showing the "Could not verify this certificate for unknonw reasons" > message on the "General" tab? It is the latter, on the "Details" tab in the chain field it shows just the

Re: Classification of client certificates by NSS / Mozilla Firefox

2010-05-05 Thread M.Hunstock
Am 05.05.2010 08:59, schrieb Kaspar Brand: > Does your cert / CKO_CERTIFICATE object lack a label? My application sets it to "null" (Java app), but even when I put something into that label.. there are strange results. I read the labels with pkcs11-tool from openSC, and it prints out something.

Re: Classification of client certificates by NSS / Mozilla Firefox

2010-05-05 Thread M.Hunstock
Am 04.05.2010 21:10, schrieb Robert Relyea: > If the token is marked with the publically readable certs/friendly > flag, then NSS will not try to authenticate to it before looking up > certs and depend on the public key semantics to identify 'user' certs. > If your token does not have a public

Re: Classification of client certificates by NSS / Mozilla Firefox

2010-05-04 Thread M.Hunstock
On 04.05.2010 18:42, Nelson B Bolyard wrote: > IIRC, NSS will expect that the private key object will have the same > CKA_ID attribute value as the CKA_ID attribute value on the certificate. oh yes.. I actually knew that and the application did it that way when putting the certs on the token. App

Classification of client certificates by NSS / Mozilla Firefox

2010-05-04 Thread M.Hunstock
Hi all, I am currently developing an application for cryptographic personalization of smart cards. One of the important usage scenarios is (of course) SSL client authentication via a web browser. Now that my app "produces" cards, I have a strange effect when trying to use them. There is a PKCS#11

Re: Problem reading certificate from hardware token

2009-07-06 Thread M.Hunstock
Anders Rundgren schrieb: > BTW, we still don't have a credible system for *remote* provisioning of > smart cards on any OS, so we shouldn't expect too much progress here > because PKCS #11 can't do that job actually! Why? What are you missing? -- dev-tech-crypto mailing list dev-tech-crypto@list