RE: Failed to toggle FIPS mode with JSS

2008-07-24 Thread David Stutzman
> -Original Message- > From: > [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > la.org] On Behalf Of Dean > Sent: Wednesday, July 23, 2008 12:09 PM > To: dev-tech-crypto@lists.mozilla.org > Subject: Re: Failed to toggle FIPS mode with JSS > Essentially I have a

Re: Failed to toggle FIPS mode with JSS

2008-07-23 Thread Nelson B Bolyard
Dean wrote, On 2008-07-23 09:08: > Thanks for the answers Wan-Teh and Nelson ... and I do agree with both > of you that the work around would be an abuse of FIPs and I shouldn't > do it if I hope to claim FIPs compliance. > > I'm clearly missing a piece of the puzzle. > > Essentially I have an

Re: Failed to toggle FIPS mode with JSS

2008-07-23 Thread Dean
On Jul 22, 7:15 pm, "Wan-Teh Chang" <[EMAIL PROTECTED]> wrote: > On Tue, Jul 22, 2008 at 1:22 PM, Dean <[EMAIL PROTECTED]> wrote: > > > I've been reading around about key generation and key material > > manipulation and am hearing that key material manipulations is not > > allowed in FIPs mode. Th

Re: Failed to toggle FIPS mode with JSS

2008-07-22 Thread Nelson Bolyard
Wan-Teh Chang wrote: > NSS doesn't allow importing or exporting of *unencrypted* secret > or private keys in FIPS mode. > > This is not an issue for SSL because the incoming premaster secret > from the *client* is encrypted with the server's RSA public key. > > If you really have to import an un

Re: Failed to toggle FIPS mode with JSS

2008-07-22 Thread Wan-Teh Chang
On Tue, Jul 22, 2008 at 1:22 PM, Dean <[EMAIL PROTECTED]> wrote: > > I've been reading around about key generation and key material > manipulation and am hearing that key material manipulations is not > allowed in FIPs mode. This seems to be confirmed by my code which > works in non-FIPs mode but

Re: Failed to toggle FIPS mode with JSS

2008-07-22 Thread Dean
Glen, Thanks for the help. I was so sure I had the checksum files in the right place I had them but only with the libraries I thought I was running against, not the ones I was really running against. Whoops. I have to ask for a little more help though. I've been reading around about k

Re: Failed to toggle FIPS mode with JSS

2008-07-22 Thread Glen Beasley
hello, Can you ensure that your installation has the ".chk" files in the same directory as their corresponding "dlls". meaning libfreebl3.chk libsoftokn3.chk need to be with libfreebl3.dll libsoftokn3.dll. http://mxr.mozilla.org/security/source/security/jss/org/mozilla/jss/tests/ http://mxr.m