Re: NSS PKCS#11 and CAPI

2008-08-05 Thread Robert Relyea
Subrata Mazumdar wrote: Hi Bob, I can neither generate key-pair nor use the private key to sign either a PKCS#10 CSR or another Cert. I remembered that I had that working at one point, but it may have attropied... It may actually be an issue in the NSS wrapper rather than the CAPI pkcs

Re: NSS PKCS#11 and CAPI

2008-07-09 Thread Subrata Mazumdar
Hi Bob, here is my experience so far with the NSS PKCS#11 and CAPI. I tried out the NSS PKCS#11 DLL for CAPI with Firefox3 security device manager and I was able to load the DLL as PKCS#11 module. Last time (a few months ago) I treid with Firefox2 and it did not work. I was actually suprised

Re: NSS PKCS#11 and CAPI

2008-07-03 Thread Chris Hills
Robert Relyea wrote: > Nelson B Bolyard wrote: > I ran with this module for over a year, there is probably some memory > leaks, but in general it worked well. > This module maps existing CAPI modules into PKCS #11 (gives Firefox > access to capi modules -- most notably *THE* capi module (microsoft

Re: NSS PKCS#11 and CAPI

2008-07-03 Thread Chris Hills
Nelson B Bolyard wrote: > The files are in > http://lxr.mozilla.org/security/source/security/nss/lib/ckfw/capi/ > Work on that project stopped ~2.5 years ago. > You're welcome to try it. > > My guess is that it does a good job at doing the things that it does, > but has limited functionality (doesn

Re: NSS PKCS#11 and CAPI

2008-07-03 Thread Robert Relyea
Nelson B Bolyard wrote: Chris Hills wrote, On 2008-07-03 10:47: From what I have read in this group, there is already some experimental code in NSS, but I have no idea as to its functionality or usability. The files are in http://lxr.mozilla.org/security/source/security/nss/lib/ckfw/

Re: NSS PKCS#11 and CAPI

2008-07-03 Thread Nelson B Bolyard
Chris Hills wrote, On 2008-07-03 10:47: > From what I have read in this group, there is already some experimental > code in NSS, but I have no idea as to its functionality or usability. The files are in http://lxr.mozilla.org/security/source/security/nss/lib/ckfw/capi/ Work on that project sto

Re: NSS PKCS#11 and CAPI

2008-07-03 Thread Chris Hills
Bruno de Paula Ribeiro wrote: > Hello Chris. > > I think you will have to write a CSP for this purpose. And that means > you will need to install the CSP Dev Service Pack, build your .dll and > than send it to Microsoft for code signing. > > Bruno. Bruno From what I have read in this group, ther

Re: NSS PKCS#11 and CAPI

2008-07-03 Thread Bruno de Paula Ribeiro
Hello Chris. I think you will have to write a CSP for this purpose. And that means you will need to install the CSP Dev Service Pack, build your .dll and than send it to Microsoft for code signing. Bruno. Chris Hills escreveu: Hi I am interested in the development of the PKCS#11 module f

NSS PKCS#11 and CAPI

2008-07-03 Thread Chris Hills
Hi I am interested in the development of the PKCS#11 module for CAPI. Could someone please point me in the right direction as to where to where I may follow its progress. My motivation is the deployment of Firefox in an enterprise that uses a private PKI (reasonably common in large networks ru