Re: Trouble importing test root certificate

2008-11-21 Thread Wan-Teh Chang
On Thu, Nov 20, 2008 at 4:23 PM, DanKegel <[EMAIL PROTECTED]> wrote: > Second problem: > Importing fails. The error is -8187, SEC_ERROR_INVALID_ARGS > Stepping through the code, I think I see it first not believing > it's a root cert, and then complaining that it doesn't recognize > the authority

Re: Trouble importing test root certificate

2008-11-21 Thread Wan-Teh Chang
On Fri, Nov 21, 2008 at 7:34 AM, DanKegel <[EMAIL PROTECTED]> wrote: > > ..., I noticed that nss does not > use const on interfaces everywhere one would > expect it. In particular, > CERT_DecodeCertFromPackage and CERT_DecodeTrustString > both take char * where they should probably take const char

Re: Trouble importing test root certificate

2008-11-21 Thread DanKegel
Thanks to Wan-Teh and Nelson for the help! I've updated http://kegel.com/cert-import-demo.cc to use CERT_DecodeCertFromPackage(), which does everything I was trying to do with NSSBase64_DecodeBuffer() and CERT_ImportCerts(), and I also added a call to CERT_ChangeCertTrust(), which I think is nee

Re: Trouble importing test root certificate

2008-11-20 Thread DanKegel
On Nov 20, 6:14 pm, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > When I change the sample program so that cert_text no longer contains > the -BEGIN and -END lines, and so that the value assigned to > len no longer includes the trailing NUL character, then when I run > the program, it outpu

Re: Trouble importing test root certificate

2008-11-20 Thread Nelson B Bolyard
DanKegel wrote, On 2008-11-20 16:23: > Hi folks. I'm having some trouble using CERT_ImportCerts. > A minimal demo of the problem is at >http://kegel.com/cert-import-demo.cc > First problem: > Decoding fails because NSSBase64_DecodeBuffer appears > to barf on the trailing ---END CERTIFICATE---

Re: Trouble importing test root certificate

2008-11-20 Thread DanKegel
On Nov 20, 4:23 pm, DanKegel <[EMAIL PROTECTED]> wrote: > First problem: > Decoding fails because NSSBase64_DecodeBuffer appears > to barf on the trailing ---END CERTIFICATE---. > Am I using this function properly?  It seems to have > code to skip trailing garbage, but evidently it's > too fragile