Re: cmsutil -R generating orphan key

2008-08-27 Thread Momcilo Majic
Hi, Before posting a bug I will rebuild the NSS with complete set of elliptic curves from NSS_3_11_1_RTM, and than try to create another certificate request, sign-it and import it again. My previous build was based on 3.12 with update based on solaris ecl-curve.h, I've run diff, and it seams that

Re: cmsutil -R generating orphan key

2008-08-26 Thread Julien R Pierre - Sun Microsystems
Nelson, Nelson B Bolyard wrote: > Momcilo Majic wrote, On 2008-08-25 23:40: > >> Hi you were correct, the trust was designated as Pu,Pu,Pu. Still >> >> - NSS is 3.12 built on Windows XP, VS2003 + MozillaBuild > > OK, In that case, it sounds like a definite bug. Note that he patched ecl-curve.h

Re: cmsutil -R generating orphan key

2008-08-26 Thread Kyle Hamilton
Removing #error from the NSS_ECC_MORE_THAN_SUITE_B results in a broken ECC build, according to another thread. -Kyle H On Mon, Aug 25, 2008 at 11:40 PM, Momcilo Majic <[EMAIL PROTECTED]> wrote: > Hi, > > Hi you were correct, the trust was designated as Pu,Pu,Pu. Still > > - NSS is 3.12 built on W

Re: cmsutil -R generating orphan key

2008-08-26 Thread Nelson B Bolyard
Momcilo Majic wrote, On 2008-08-25 23:40: > Hi you were correct, the trust was designated as Pu,Pu,Pu. Still > > - NSS is 3.12 built on Windows XP, VS2003 + MozillaBuild OK, In that case, it sounds like a definite bug. If you could supply your cert and key DB files, I'd debug it. I gather that

Re: cmsutil -R generating orphan key

2008-08-25 Thread Momcilo Majic
Hi, Hi you were correct, the trust was designated as Pu,Pu,Pu. Still - NSS is 3.12 built on Windows XP, VS2003 + MozillaBuild - NSS_ENABLE_ECC + NSS_ECC_MORE_THAN_SUITE_B with patched ecl-curve.h (removed #error) I will try to find the topic you mentioned. Best regards, Momcilo Majic Nelson B

Re: cmsutil -R generating orphan key

2008-08-25 Thread Nelson B Bolyard
Momcilo Majic wrote, On 2008-08-25 13:03: > I have created simple CA using ejbca. The root certificate is ECDSA based. > > 1. Than I've tried to create certificate request using certutil: > certutil -R -s "CN=TestECDSA" -o request.req -a -d database -k ec -q > nistp192 -a > 2. I've uploaded resu

cmsutil -R generating orphan key

2008-08-25 Thread Momcilo Majic
Hi, I have created simple CA using ejbca. The root certificate is ECDSA based. 1. Than I've tried to create certificate request using certutil: certutil -R -s "CN=TestECDSA" -o request.req -a -d database -k ec -q nistp192 -a 2. I've uploaded resulting request to the EJBCA, signing and got cert.p