Installing PKCS11 on Firefox at startup

2008-12-30 Thread Paco
Hi. I'm developing an extension which, for other reasons already contains a C++ component using NSS for several tasks. Lately, I decided to add another task: Since we distribute a PKCS11 module with our application, I decided to install it on Firefox startup without prompting the user. nsIDOMPKCS

Re: Generate PKCS12 not containing CA certificates

2008-09-25 Thread Paco
On 24 sep, 20:08, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Paco wrote, On 2008-09-24 04:17: > > > On 22 sep, 21:19, Nelson B Bolyard wrote: > > you can't also export a pkcs12 containing just CA certifcates, which I > > belive is something accepted in the pkc

Re: Generate PKCS12 not containing CA certificates

2008-09-24 Thread Paco
On 22 sep, 21:19, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Paco wrote, On 2008-09-21 23:46: > > > I read the elf headers for every > > shared library distributed with firefox and the symbol > > SEC_PKCS12AddCertAndKey was defined, but SEC_PKCS12AddCert a

Re: Generate PKCS12 not containing CA certificates

2008-09-21 Thread Paco
On 19 sep, 18:14, Kaspar Brand <[EMAIL PROTECTED]> wrote: > > Using NSS PKCS12 API, is there any way to generate a p12 file that > > includes just the personal certificate and the key I want, keeping > > the intermediate and root CAs for that cert away of the file? > > Yes, AFAICT. You can't use S

Generate PKCS12 not containing CA certificates

2008-09-19 Thread Paco
Hi everyone. Using NSS PKCS12 API, is there any way to generate a p12 file that includes just the personal certificate and the key I want, keeping the intermediate and root CAs for that cert away of the file? Thanks for your help. ___ dev-tech-crypto m

Extracting RSA keys from internal database

2008-09-03 Thread Paco
rtpw, privkey, 1, (void *) " TESTDBPassword" ); I've also tried other algorithms , but only *PKCS5_PBE* and *PKCS12_V2_PBE* group gives a non-null return to encprivkey (not even *PKCS12_V1_PBE* work). Anyway, I've tried dumping it to a file, this way: testf