Re: Creating detached PKCS#7 signature with cmsutil

On Thu, Aug 7, 2008 at 3:33 PM, Michael Ströder <[EMAIL PROTECTED]> wrote: > Wan-Teh Chang wrote: >> Which Linux distribution is this? > > openSUSE Linux 11.0 Thanks. openSUSE's NSS package maintainer stays in close touch with us, so the system NSS libraries should be fine. Could you run signver

Re: Creating detached PKCS#7 signature with cmsutil

Wan-Teh Chang wrote: > Which Linux distribution is this? openSUSE Linux 11.0 Ciao, Michael. ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: Creating detached PKCS#7 signature with cmsutil

Wan-Teh Chang wrote: 2008/8/7 Robert Relyea <[EMAIL PROTECTED]>: signver was finally made to link with the dynamic NSS libraries in NSS 3.12.1 (not yet released), so pretty much any package will have static linked version of it. That's 'signtool', not 'signver'. Opps, my bad...;(

Re: Creating detached PKCS#7 signature with cmsutil

2008/8/7 Robert Relyea <[EMAIL PROTECTED]>: > > signver was finally made to link with the dynamic NSS libraries in NSS > 3.12.1 (not yet released), so pretty much any package will have static > linked version of it. That's 'signtool', not 'signver'. Wan-Teh ___

Re: Creating detached PKCS#7 signature with cmsutil

Wan-Teh Chang wrote: On Thu, Aug 7, 2008 at 4:40 AM, Michael Ströder <[EMAIL PROTECTED]> wrote: Ok, I've extracted ftp://ftp.mozilla.org/pub/security/nss/releases/NSS_3_11_4_RTM/Linux2.6_x86_glibc_PTH_DBG.OBJ/nss-3.11.4.tar.gz and set LD_LIBRARY_PATH to the extracted lib/ dir (see output of

Re: Creating detached PKCS#7 signature with cmsutil

On Thu, Aug 7, 2008 at 4:40 AM, Michael Ströder <[EMAIL PROTECTED]> wrote: > > Ok, I've extracted > ftp://ftp.mozilla.org/pub/security/nss/releases/NSS_3_11_4_RTM/Linux2.6_x86_glibc_PTH_DBG.OBJ/nss-3.11.4.tar.gz > > and set LD_LIBRARY_PATH to the extracted lib/ dir (see output of ldd > below). Is s

Re: Creating detached PKCS#7 signature with cmsutil

Michael Ströder wrote: > Nelson B Bolyard wrote: >> The binaries for the NSS 3.11.4 release may be obtained from >> ftp://ftp.mozilla.org/pub/security/nss/releases/NSS_3_11_4_RTM/ >> If the -s option also behaves as you found with those binaries, I'd like >> to know that. > > I will give it a try.

Re: Creating detached PKCS#7 signature with cmsutil

Nelson B Bolyard wrote: > Michael Ströder wrote, On 2008-08-06 04:07: >> Nelson B Bolyard wrote: cmsutil -D -d ~/.mozilla/xxx/ -c name.tar.gz -i name.tar.gz.p7m -o test >>> I remember running into this long ago. As I recall, the pass/fail result >>> is very subtle. It may be nothing more

Re: Creating detached PKCS#7 signature with cmsutil

Michael Ströder wrote, On 2008-08-06 04:07: > Nelson B Bolyard wrote: >>> cmsutil -D -d ~/.mozilla/xxx/ -c name.tar.gz -i name.tar.gz.p7m -o test >> I remember running into this long ago. As I recall, the pass/fail result >> is very subtle. It may be nothing more than the program's result cod

Re: Creating detached PKCS#7 signature with cmsutil

Nelson B Bolyard wrote: >> cmsutil -D -d ~/.mozilla/xxx/ -c name.tar.gz -i name.tar.gz.p7m -o test > > I remember running into this long ago. As I recall, the pass/fail result > is very subtle. It may be nothing more than the program's result code. > > What did you get in the "test" file?

Re: Creating detached PKCS#7 signature with cmsutil

Nelson B Bolyard wrote: > Michael Ströder wrote, On 2008-08-05 15:44: >> Michael Ströder wrote: >>> I also tried signver but this hangs: >>> >>> signver -V -v -d ~/.mozilla/xxx/ -i name.tar.gz -s name.tar.gz.p7m >>> >>> strace output of hanging signver: >>> >>> - snip --

Re: Creating detached PKCS#7 signature with cmsutil

Michael Ströder wrote, On 2008-08-05 15:44: > Michael Ströder wrote: >> I also tried signver but this hangs: >> >> signver -V -v -d ~/.mozilla/xxx/ -i name.tar.gz -s name.tar.gz.p7m >> >> strace output of hanging signver: >> >> - snip - >> open("n

Re: Creating detached PKCS#7 signature with cmsutil

Michael Ströder wrote, On 2008-08-05 06:09: > HI! > > I'd like to generate and verify a detached signature (in a separate > file) with a key from my Seamonkey profile. Is this approach with > cmsutil ok (single command-line wrapped here)? > > cmsutil -S -d ~/.mozilla/xxx/ -N "cert nickname"

Re: Creating detached PKCS#7 signature with cmsutil

Michael Ströder wrote: > I also tried signver but this hangs: > > signver -V -v -d ~/.mozilla/xxx/ -i name.tar.gz -s name.tar.gz.p7m > > strace output of hanging signver: > > - snip - > open("name.tar.gz", O_RDONLY|O_LARGEFILE) = 5 > open("name

Re: Creating detached PKCS#7 signature with cmsutil

Michael Ströder wrote: > > I'd like to generate and verify a detached signature (in a separate > file) with a key from my Seamonkey profile. Is this approach with > cmsutil ok (single command-line wrapped here)? > > cmsutil -S -d ~/.mozilla/xxx/ -N "cert nickname" -G -H SHA1 -T -i > name.t