Re: RSA AES Cipher problem with JSS/NSS

2009-04-07 Thread Glen Beasley
hello, I created https://bugzilla.mozilla.org/show_bug.cgi?id=487325 for an immediate work around you can choose to use JSS's own SSL classes, instead of the JSSE. -glen ksreedha...@gmail.com wrote: Hello Glen, I tried to look into the source of classes where these exceptions were thrown.

Re: RSA AES Cipher problem with JSS/NSS

2009-04-02 Thread ksreedhar74
Hello Glen, I tried to look into the source of classes where these exceptions were thrown. One interesting thing I observed is, JSSCipherSpi expects Public Key only in "WRAP_MODE". But JCE_RSACipher is calling it in "ENCRYPT_MODE" in which JSS expects a secret key. Since the passed key not a secr

Re: RSA AES Cipher problem with JSS/NSS

2009-04-02 Thread ksreedhar74
Thanks Glen. Yes it works with the default provider. tstclnt fails with the error Issuer certificate is invalid. When I used with option -o (Override bad server cert), it works fine. The certificate wes used is a Self signed certificate. So, probably tstclnt didn't like it. One more thing is, Ope

Re: RSA AES Cipher problem with JSS/NSS

2009-04-02 Thread Glen Beasley
hi, can you successfully connect to your server using JSSE with it's default provider? meaning not using mozilla-JSS as the provider? I know you have used ssltap can you use NSS tool tstclnt? tstclnt -h -p -d -v -2 -3 -c v If you want full client auth specify your cert nickname with -n

Re: RSA AES Cipher problem with JSS/NSS

2009-04-02 Thread ksreedhar74
Thanks Nelson for the reply. Jss version is 4.2.5 JRE version is 1.6 NSS vesion is 3.11.4 See my comments inline. On Apr 1, 8:45 pm, Nelson B Bolyard wrote: > ksreedha...@gmail.com wrote, On 2009-04-01 17:54: > > > Hello, > > > I am [using] Mozilla-JSS as the provider in my Java application whi

Re: RSA AES Cipher problem with JSS/NSS

2009-04-01 Thread Nelson B Bolyard
ksreedha...@gmail.com wrote, On 2009-04-01 17:54: > Hello, > > I am [using] Mozilla-JSS as the provider in my Java application which > is a SSL client connecting to OpenSSL based SSL Server. You haven't reported version information, such as: - version of JDK/JRE - version of JSS - version of NSS

RSA AES Cipher problem with JSS/NSS

2009-04-01 Thread ksreedhar74
Hello, I am Mozilla-JSS as the provider in my Java application which is a SSL client connecting to OpenSSL based SSL Server. I am using the cipher suite "TLS_RSA_WITH_AES_128_CBC_SHA" and we are using TLSv1.0 as the SSL protocol. I get this exception when I try to connect to the server. Server h