Re: Unable to use signtool on Mac

2008-08-29 Thread Wan-Teh Chang
On Fri, Aug 29, 2008 at 7:31 AM, Michael Kaply <[EMAIL PROTECTED]> wrote: > Wan-Teh Chang wrote: > n/NSS_reference/Building_and_installing_NSS >> >> For Mac OS X, copy all the *.dylib and *.chk files from >> mozilla/dist/Darwin...OBJ/lib to the installation directory. >> Then copy the command-line

Re: Unable to use signtool on Mac

2008-08-29 Thread Michael Kaply
Wan-Teh Chang wrote: n/NSS_reference/Building_and_installing_NSS > > For Mac OS X, copy all the *.dylib and *.chk files from > mozilla/dist/Darwin...OBJ/lib to the installation directory. > Then copy the command-line tools you want from > mozilla/dist/Darwin...OBJ/bin to the installation directory

Re: Unable to use signtool on Mac

2008-08-29 Thread Michael Kaply
Kyle Hamilton wrote: > http://www.darwinports.com/ -- the version they claim is 3.11.9. > They actually download, build and install the real thing, but they make some changes. Here are their makefile changes: http://svn.macports.org/repository/macports/trunk/dports/net/nss/files/patch-Darwin.m

Re: Unable to use signtool on Mac

2008-08-28 Thread Kyle Hamilton
http://www.darwinports.com/ -- the version they claim is 3.11.9. -Kyle H On Thu, Aug 28, 2008 at 4:33 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > Michael Kaply wrote: >> OK, so basically it's the darwin ports version of NSS 11.9 that is >> causing the problem. >> >> If I build it myself eve

Re: Unable to use signtool on Mac

2008-08-28 Thread Nelson B Bolyard
Michael Kaply wrote: > OK, so basically it's the darwin ports version of NSS 11.9 that is > causing the problem. > > If I build it myself everything is great. > > What a waste of two hours yesterday. Please tell us where one finds "the darwin ports version of NSS 11.9" so that we can steer peop

Re: Unable to use signtool on Mac

2008-08-28 Thread Wan-Teh Chang
On Thu, Aug 28, 2008 at 7:36 AM, Michael Kaply <[EMAIL PROTECTED]> wrote: > OK, so basically it's the darwin ports version of NSS 11.9 that is > causing the problem. > > If I build it myself everything is great. > > What a waste of two hours yesterday. > > Anyone have a script that shows how NSS/NS

Re: Unable to use signtool on Mac

2008-08-28 Thread Julien R Pierre - Sun Microsystems
Michael, It would still be nice for us to know what was changed in 3.12 that fixed this problem, since there was no explicit bug for it. NSS 3.11.x is still actively supported and we are making patch releases. NSS 3.11.10 will be coming soon. We might include the fix if we know what it is. If

Re: Unable to use signtool on Mac

2008-08-28 Thread Michael Kaply
OK, so basically it's the darwin ports version of NSS 11.9 that is causing the problem. If I build it myself everything is great. What a waste of two hours yesterday. Anyone have a script that shows how NSS/NSPR should be installed on Mac? Mike ___ d

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Nelson B Bolyard wrote: > Michael Kaply wrote: >> For the record, I just checked my Windows machine (where all this works) >> >> It's NSS 3.11 >> >> The extra "thawte" is not in the database >> >> c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u >> Thawte Code Signing CA - Thawte

Re: Unable to use signtool on Mac

2008-08-27 Thread Nelson B Bolyard
Julien R Pierre - Sun Microsystems wrote: > Michael, > > Michael Kaply wrote: >> I was using 3.12 which is the only 3.12 version available here >> >> ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/ >> >> > > OK. 3.12.1 was very recently released (last week), but I guess we > haven't

Re: Unable to use signtool on Mac

2008-08-27 Thread Nelson B Bolyard
Michael Kaply wrote: > For the record, I just checked my Windows machine (where all this works) > > It's NSS 3.11 > > The extra "thawte" is not in the database > > c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u > Thawte Code Signing CA - Thawte Consulting ccc,

Re: Unable to use signtool on Mac

2008-08-27 Thread Julien R Pierre - Sun Microsystems
Michael, Michael Kaply wrote: > > I was using 3.12 which is the only 3.12 version available here > > ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/ > > OK. 3.12.1 was very recently released (last week), but I guess we haven't uploaded a source tarball for it yet. If you have a

Re: Unable to use signtool on Mac

2008-08-27 Thread Julien R Pierre - Sun Microsystems
Mike, Michael Kaply wrote: > For the record, everything works fine with an NSS 3.12 that I built on > my machine. > > So I don't know if it is an NSS 3.11 problem (which might be the case > since other people have reported it) or a problem with darwin ports > (which I doubt) > > Mike Kaply F

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Julien R Pierre - Sun Microsystems wrote: > Mike, > > Michael Kaply wrote: >> For the record, everything works fine with an NSS 3.12 that I built on >> my machine. >> >> So I don't know if it is an NSS 3.11 problem (which might be the case >> since other people have reported it) or a problem wit

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
For the record, I just checked my Windows machine (where all this works) It's NSS 3.11 The extra "thawte" is not in the database c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u Thawte Code Signing CA - Thawte Consulting ccc,,c I used exactly the same PFX file

Re: Unable to use signtool on Mac

2008-08-27 Thread Julien R Pierre - Sun Microsystems
Mike, Michael Kaply wrote: > For the record, everything works fine with an NSS 3.12 that I built on > my machine. > > So I don't know if it is an NSS 3.11 problem (which might be the case > since other people have reported it) or a problem with darwin ports > (which I doubt) > > Mike Kaply T

Re: Unable to use signtool on Mac

2008-08-27 Thread Nelson B Bolyard
Michael Kaply wrote: > Nelson B Bolyard wrote: >> what does >> certutil -d ~ -L >> output? > > c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u > Thawte Code Signing CA - Thawte Consulting ccc,c,c > thawte c

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Nelson B Bolyard wrote: > Michael Kaply wrote: >> Nelson B Bolyard wrote: > >>> what does >>> certutil -d ~ -L >>> output? >> c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u >> Thawte Code Signing CA - Thawte Consulting ccc,c,c >> thawte

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Nelson B Bolyard wrote: > Michael Kaply wrote: >> Wan-Teh Chang wrote:> >>> Please provide the signtool command line you used, and the >>> content of the relevant directories. >>> >>> "An I/O error occurred during security authorization" is >>> SEC_ERROR_IO. This error often has nothing to do >>>

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
With NSS 3.12 it looks like this after import (and works) c1dfd405-9dc0-4b7c-8e98-7b2772a81922 u,u,u Thawte Code Signing CA - Thawte Consulting cc,, ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.or

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
For the record, everything works fine with an NSS 3.12 that I built on my machine. So I don't know if it is an NSS 3.11 problem (which might be the case since other people have reported it) or a problem with darwin ports (which I doubt) Mike Kaply __

Re: Unable to use signtool on Mac

2008-08-27 Thread Nelson B Bolyard
Michael Kaply wrote: > Wan-Teh Chang wrote:> >> Please provide the signtool command line you used, and the >> content of the relevant directories. >> >> "An I/O error occurred during security authorization" is >> SEC_ERROR_IO. This error often has nothing to do >> with I/O. SEC_ERROR_IO is report

Re: Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
Wan-Teh Chang wrote:> > Please provide the signtool command line you used, and the > content of the relevant directories. > > "An I/O error occurred during security authorization" is > SEC_ERROR_IO. This error often has nothing to do > with I/O. SEC_ERROR_IO is reported when > libsoftokn3.dylib

Re: Unable to use signtool on Mac

2008-08-27 Thread Wan-Teh Chang
On Wed, Aug 27, 2008 at 8:34 AM, Michael Kaply <[EMAIL PROTECTED]> wrote: > I'm having a problem signing my Firefox extension on Mac OS X. The error > I get is: > > signtool: function failed: An I/O error occurred during security > authorization. > > > I built NSS and NSPR myself using Darwin Ports

Unable to use signtool on Mac

2008-08-27 Thread Michael Kaply
I'm having a problem signing my Firefox extension on Mac OS X. The error I get is: signtool: function failed: An I/O error occurred during security authorization. I built NSS and NSPR myself using Darwin Ports sudo port install nspr (4.7_1) sudo port install nss (3.11.9_0) I have had no