Re: Using libnss with client certificates via pkcs11

2013-06-21 Thread Robert Relyea
Third, you may need to hook the client_auth_callback as John describes below. If your server sends the list of trusted CA's in it's client auth request, then the default client_auth_callback should be able to find the cert on your smartcard without requiring the use of any special hooks, bu

Re: Using libnss with client certificates via pkcs11

2013-06-21 Thread Robert Relyea
On 06/21/2013 08:13 AM, John Dennis wrote: On 06/20/2013 01:20 PM, Johan Dahlin wrote: [Sorry if this appears twice, the first copy got stuck in the moderation queue] I'm investigating the use of smart card readers for my application[1], which is also free software. As part of the brazilian el

Re: Using libnss with client certificates via pkcs11

2013-06-21 Thread Johan Dahlin
I've been setting that as well, if I pass in a nickname nss says that the database is corrupted, so I'm passing in an empty string. I managed to get the password callback called as well, so there's some interaction with the pkcs11 device. Still seeing a 403 though. I've been trying to figure out

Re: Using libnss with client certificates via pkcs11

2013-06-21 Thread John Dennis
On 06/20/2013 01:20 PM, Johan Dahlin wrote: > [Sorry if this appears twice, the first copy got stuck in the moderation > queue] > > I'm investigating the use of smart card readers for my application[1], > which is also free software. > > As part of the brazilian eletronic legislation I need to b

Using libnss with client certificates via pkcs11

2013-06-20 Thread Johan Dahlin
[Sorry if this appears twice, the first copy got stuck in the moderation queue] I'm investigating the use of smart card readers for my application[1], which is also free software. As part of the brazilian eletronic legislation I need to be able to connect to a https server[2] and do a couple of s