Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-19 Thread David Stutzman
Subrata Mazumdar wrote: Thanks Wan-Teh for the suggestion. No, requiring custom version of Firefox to use ECC key based certificate enrollment is not realistic. It just does not seem right to disable access to all licensed ECC implementation just because Mozilla wants to disable the ECC implem

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-16 Thread Subrata Mazumdar
Thanks Wan-Teh for the suggestion. No, requiring custom version of Firefox to use ECC key based certificate enrollment is not realistic. It just does not seem right to disable access to all licensed ECC implementation just because Mozilla wants to disable the ECC implementation in the NSS soft-

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-15 Thread Wan-Teh Chang
On Thu, May 14, 2009 at 8:53 PM, Subrata Mazumdar wrote: > > I just have another question. According to the source code > (http://mxr.mozilla.org/security/source/security/nss/lib/cryptohi/secsign.c#92) >  signing with EC key is disabled irrespective of underlying security device. > What about if I

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-14 Thread Nelson B Bolyard
Subrata Mazumdar wrote, On 2009-05-14 20:53: > I just have another question. According to the source code > (http://mxr.mozilla.org/security/source/security/nss/lib/cryptohi/secsign.c#92) > > signing with EC key is disabled irrespective of underlying security > device. What about if I am using

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-14 Thread Subrata Mazumdar
Nelson B Bolyard wrote: Kaspar Brand wrote, On 2009-05-13 22:16: Subrata Mazumdar wrote: As I have said in the earlier message, I have no problem in generating EC key-pair. I get error when I try to sign the request using the private key. Maybe you're falling prey to this bug

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-13 Thread Nelson B Bolyard
Kaspar Brand wrote, On 2009-05-13 22:16: > Subrata Mazumdar wrote: >> As I have said in the earlier message, I have no problem in generating >> EC key-pair. I get error when I try to sign the request using the >> private key. > > Maybe you're falling prey to this bug? > > https://bugzilla.mozil

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-13 Thread Kaspar Brand
Subrata Mazumdar wrote: > As I have said in the earlier message, I have no problem in generating > EC key-pair. I get error when I try to sign the request using the > private key. Maybe you're falling prey to this bug? https://bugzilla.mozilla.org/show_bug.cgi?id=367577 Kaspar -- dev-tech-cry

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-13 Thread Nelson B Bolyard
Subrata Mazumdar wrote, On 2009-05-13 17:58: > Nelson B Bolyard wrote: >> That's strange. Your DSA test code should NOT have worked. I wonder >> how it could have worked, given that you supplied no "params". > According to the source code > (http://mxr.mozilla.org/mozilla-central/source/securit

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-13 Thread Subrata Mazumdar
Nelson B Bolyard wrote: Subrata Mazumdar wrote, On 2009-05-13 06:45 PDT: The key genartion now works for RSA and DSA key types but it still fails for EC key type. else if (keyType == "dsa") { keyGenAlg = "dsa-sign-nonrepudiation"; keyParams = null; } According

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-13 Thread Nelson B Bolyard
Subrata Mazumdar wrote, On 2009-05-13 06:45 PDT: > The key genartion now works for RSA and DSA key types but it still fails > for EC key type. >>else if (keyType == "dsa") { >>keyGenAlg = "dsa-sign-nonrepudiation"; >>keyParams = null; >>} That's strange. Your DSA test c

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-13 Thread Subrata Mazumdar
Thanks David. For EC, if no curve name is given then the type of keysize is used to pick either P-256 or P-384 curve. I tried with and without curve name - it fails both cases. I also looked into the source code (.../security/manager/ssl/src/nsCrypto.cpp) of PSM for FF3. The support for EC se

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-13 Thread Georgi Guninski
On Wed, May 13, 2009 at 08:16:39AM -0400, Subrata Mazumdar wrote: > Hi, > I am not able generate key using window.crypto.generateCRMFRequest() check: https://developer.mozilla.org/En/JavaScript_crypto/GenerateCRMFRequest this works for me: m=crypto.generateCRMFRequest("CN=vvv", "regToken", null

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-13 Thread David Stutzman
Subrata Mazumdar wrote: On further testing and reading the description of generateCRMFRequest() method doc, I figured out why the key generation was failing. I have to pass keySize as integer type not string type. The key genartion now works for RSA and DSA key types but it still fails for EC

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-13 Thread Subrata Mazumdar
On further testing and reading the description of generateCRMFRequest() method doc, I figured out why the key generation was failing. I have to pass keySize as integer type not string type. function testKeyGeneration() { doGenerateCRMFCSRByCryptoTest("cn=xxx,o=abc.com", "rsa', parseInt("1024")