Re: NSPR assertion failure

Hi Wan-Teh, Before I try to get the stack track using gdb on the core file, as I made it to crash with your suggested change, Java crashed with this error. Actually it also stack trace. Can you see anything from it. I appreciate your help. This is a must fix for us. # # An unexpected error has b

Re: NSPR assertion failure

Hi Wan-Teh, Before the crash, I get the output of "pthread_mutex_lock fails with 22". So, rv value is 22. Can you figure out the something out of this. Thanks, Sreedhar On Apr 7, 5:19 pm, Wan-Teh Chang wrote: > On Fri, Mar 20, 2009 at 10:49 PM,   wrote: > > On Mar 20, 9:59 pm, ksreedha...@gmai

Re: RNG continuous test failure

Thanks Glen for the information. On Apr 24, 5:57 pm, Glen Beasley wrote: > ksreedha...@gmail.com wrote: > > On Apr 24, 10:03 am, Wan-Teh Chang wrote: > > >> On Thu, Apr 23, 2009 at 1:51 PM,   wrote: > > >>> Hello, > > >>> I am using Mozilla JSS provider from Java. > > >>> JSS 4.2.5 > >>> NSS 3.1

Re: non-approved PRNG in FIPS mode

Thanks Wan-Teh for the reply. In the link you have sent it is stated that, "The initial value of XKEY is derived using the following procedure. We obtain 1024 bytes from the system random number generator. On Windows XP SP 2, we call the CryptGenRandom function in the CryptoAPI. On Solaris, HP-U

Re: non-approved PRNG in FIPS mode

Hello Nelson, I didn't frame my original question correctly. For FIPS, Continuous RNG test should be performed on approved or non approved RNG that are used. If I understand correctly, NSS uses /dev/urandom as entropy source but it does not generate the random number twice from /dev/urandom and

Re: NSS source building

Thanks Glen. Some how without making any changes it worked now. Probably I did some thing wrong earlier. Thanks, SReedhar On Apr 27, 11:44 am, Glen Beasley wrote: > ksreedha...@gmail.com wrote: > > Thanks Glen for the response. > > > I just copied new built library files to the same directory w

Re: NSS source building

Thanks Glen for the response. I just copied new built library files to the same directory where the original ones were. No environment changes. The library files directory is in LD_LIBRARY_PATH. Do I need to build JSS from source if I build NSS/NSPR from source or can I use the binaries downloade

NSS source building

Hello, I am using JSS 4.2.5, NSS 3.11.4, NSPR 4.6.4. If I use the binaries downloaded from https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_11_4_RTM/Linux2.6_x86_glibc_PTH_DBG.OBJ/ and https://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v4.6.4/Linux2.6_x86_glibc_PTH_DBG.OBJ/

Re: RNG continuous test failure

On Apr 24, 10:03 am, Wan-Teh Chang wrote: > On Thu, Apr 23, 2009 at 1:51 PM,   wrote: > > Hello, > > > I am using Mozilla JSS provider from Java. > > > JSS 4.2.5 > > NSS 3.11.4 > > NSPR 4.6.4 > > > When the FIPS RNG continuous tests fail, what is the behavior in NSS/ > > JSS. What does it return.

non-approved PRNG in FIPS mode

Hello, I am using NSS 3.11.4 and NSPR 4.6.4 Will the non-approved PRNG of NSS be functional/usable when NSS is in FIPS mode. Thanks, Sreedhar -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

RNG continuous test failure

Hello, I am using Mozilla JSS provider from Java. JSS 4.2.5 NSS 3.11.4 NSPR 4.6.4 When the FIPS RNG continuous tests fail, what is the behavior in NSS/ JSS. What does it return. do we get an java exception to the calling function. For example, when Java code tries to establish a TLS Socket sess

Re: NSPR assertion failure

Hello Julien, When I tried to print the values for rv and errno, gdb complained saying No symbol for these variables in current context. I used symbol-file command with all the nspr libraries. and then ran the command core with the core file. Which library has these variables. What I did is, (

tstclnt with self signed certificate

Hello, NSS version 3.11.4 If I use the tstclnt with self signed certificate on the server (with some name in Issuer/Subject common name for Certiificate) "tstclnt -h -p -d -v -2 -3 -c v". It fails with the error "certificate issuer is not recognized". If I use "CACert" for this common name,

Re: RSA AES Cipher problem with JSS/NSS

Hello Glen, I tried to look into the source of classes where these exceptions were thrown. One interesting thing I observed is, JSSCipherSpi expects Public Key only in "WRAP_MODE". But JCE_RSACipher is calling it in "ENCRYPT_MODE" in which JSS expects a secret key. Since the passed key not a secr

Re: RSA AES Cipher problem with JSS/NSS

Thanks Glen. Yes it works with the default provider. tstclnt fails with the error Issuer certificate is invalid. When I used with option -o (Override bad server cert), it works fine. The certificate wes used is a Self signed certificate. So, probably tstclnt didn't like it. One more thing is, Ope

Re: RSA AES Cipher problem with JSS/NSS

Thanks Nelson for the reply. Jss version is 4.2.5 JRE version is 1.6 NSS vesion is 3.11.4 See my comments inline. On Apr 1, 8:45 pm, Nelson B Bolyard wrote: > ksreedha...@gmail.com wrote, On 2009-04-01 17:54: > > > Hello, > > > I am [using] Mozilla-JSS as the provider in my Java application whi

RSA AES Cipher problem with JSS/NSS

Hello, I am Mozilla-JSS as the provider in my Java application which is a SSL client connecting to OpenSSL based SSL Server. I am using the cipher suite "TLS_RSA_WITH_AES_128_CBC_SHA" and we are using TLSv1.0 as the SSL protocol. I get this exception when I try to connect to the server. Server h

Re: NSPR assertion failure

Hi Julien, I am running this on CentOS 5. This is part of the Java Server. Where should I see the core file. I didn't find one. I searched entire file system for the core What would be the file name. Thanks, Sreedhar On Mar 23, 3:41 pm, Julien R Pierre - Sun Microsystems wrote: > Sreedhar, > >

Re: NSPR assertion failure

On Mar 20, 9:59 pm, ksreedha...@gmail.com wrote: > Hello, > > I am using JSS 4.2.5, NSS 3.11.4 and NSPR 4.6.4 > > Many times, my Java Server crashes with the following error. > > Assertion failure: 0 == rv, at ../../../../../nsprpub/pr/src/pthreads/ > ptsynch.c:207 > > Is there any solution to this

NSPR assertion failure

Hello, I am using JSS 4.2.5, NSS 3.11.4 and NSPR 4.6.4 Many times, my Java Server crashes with the following error. Assertion failure: 0 == rv, at ../../../../../nsprpub/pr/src/pthreads/ ptsynch.c:207 Is there any solution to this. Thanks, Sreedhar -- dev-tech-crypto mailing list dev-tech-cry

NSS RNG

Hello, Does NSS support "Regular 186 RNG" also along with "General Purpse RNG"? Thanks, Sreedhar -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: JSS API for FIPS Self Tests

On Jan 15, 10:53 am, Glen Beasley wrote: > ksreedha...@gmail.com wrote: > > On Jan 14, 10:21 am, Glen Beasley wrote: > > >> Sreedhar Kamishetti wrote: > > >>> Hello, > > >>> I just started looking at JSS. > > >>> Can some one point me to the API provided by JSS for running Power Up > >>> and Cond

Re: JSS API for FIPS Self Tests

On Jan 14, 10:21 am, Glen Beasley wrote: > Sreedhar Kamishetti wrote: > > > Hello, > > > I just started looking at JSS. > > > Can some one point me to the API provided by JSS for running Power Up > > and Conditional Self Tests for various cryptographic modules/algorithms? > > JSS is a JAVA interfa