Re: enabling crypto hardware for NSS

2008-09-24 Thread Nelson Bolyard
capricieuse wrote, On 2008-09-24 05:04: > I am developing an application for signing Web Formular and i m using > a UsbToken to get to the Private Key. > I what that my application connecte from the server side to client > side and load information from the Token to the server where the > signature

Re: enabling crypto hardware for NSS

2008-09-24 Thread capricieuse
I am developing an application for signing Web Formular and i m using a UsbToken to get to the Private Key. I what that my application connecte from the server side to client side and load information from the Token to the server where the signature system will be achived. First i m not sure that t

Re: enabling crypto hardware for NSS

2008-09-19 Thread Julien R Pierre - Sun Microsystems
David, David Sadler wrote: > > however, when I enter the failing condition > wget https://localhost > --10:02:50-- https://localhost/ >=> `index.html.5' > Resolving localhost... 127.0.0.1, ::1 > Connecting to localhost|127.0.0.1|:443... connected. > Unable to establish SSL connectio

Re: enabling crypto hardware for NSS

2008-09-18 Thread David Sadler
*/) = 0 It appears that someone is trying to send to opencryptoki. Any suggestions? Julien R Pierre - Sun Microsystems <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 09/11/2008 05:53 PM Please respond to "mozilla's crypto code discussion list" To dev-tech-crypto@lists.mozilla.

enabling crypto hardware for NSS

2008-09-11 Thread David Sadler
I am tring to setup logger as per http://www.mozilla.org/projects/security/pki/nss/tech-notes/tn2.html I have this modutil -dbdir /etc/apache2/SampleCertDBs/ -list Using database directory /etc/apache2/SampleCertDBs... Listing of PKCS #11 Modules --

Re: enabling crypto hardware for NSS

2008-09-11 Thread Julien R Pierre - Sun Microsystems
David, David Sadler wrote: > > I believe we have a debug build. Any idea why there is no log data? You should double check that you really do have debug builds, for both NSPR and NSS bits. The behavior you describe is consistent with not having a debug build. One quick way to check that debu

Re: enabling crypto hardware for NSS

2008-09-11 Thread Nelson B Bolyard
capricieuse wrote, On 2008-09-11 07:18: > I'm debuting with Software Developement and i need help, > I'm trying to add Nss tools to Sun application server in order to run > an application that load information from USBToken localised in > client side . > So i flowed instructions in this link:http:/

Re: enabling crypto hardware for NSS

2008-09-11 Thread capricieuse
I'm debuting with Software Developement and i need help, I'm trying to add Nss tools to Sun application server in order to run an application that load information from USBToken localised in client side . So i flowed instructions in this link:http://developers.sun.com/ appserver/reference/techart/k

Re: enabling crypto hardware for NSS

2008-08-01 Thread Nelson B Bolyard
David Sadler wrote: > We have made some progress but still having problems. > > This is what we have tried ... on SLES 10 SP1 , Suse Linux, IBM zSeries > hardware. > > on the NSS side we created a certificate DB with certutil > then added openCrypto to the DB with NSS modutil > # modutil -dbd

Re: enabling crypto hardware for NSS

2008-08-01 Thread David Sadler
We have made some progress but still having problems. This is what we have tried ... on SLES 10 SP1 , Suse Linux, IBM zSeries hardware. on the NSS side we created a certificate DB with certutil then added openCrypto to the DB with NSS modutil modutil -dbdir /etc/apache2/

Re: enabling crypto hardware for NSS

2008-07-23 Thread Wan-Teh Chang
2008/7/23 David Sadler <[EMAIL PROTECTED]>: > > In mozilla-nss.spec BUILD_OPT is set to 1 > > %build > cd mozilla/security/nss > export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing" > export NSPR_INCLUDE_DIR=`nspr-config --includedir` > export NSPR_LIB_DIR=`nspr-config --libdir` > export BUILD_OPT=1

Re: enabling crypto hardware for NSS

2008-07-23 Thread Nelson B Bolyard
David Sadler wrote, On 2008-07-23 08:12: > > Is this IBM linux? Red Hat Linux? or ? > (I ask because I know that Red Hat Linux supports mod_nss in Apache, but > I was not aware that it was also being used in any IBM Linux. That would > be good to know.) > > I am using SUSE 10 Linux, with Red

Re: enabling crypto hardware for NSS

2008-07-23 Thread David Sadler
In mozilla-nss.spec BUILD_OPT is set to 1 %build cd mozilla/security/nss export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing" export NSPR_INCLUDE_DIR=`nspr-config --includedir` export NSPR_LIB_DIR=`nspr-config --libdir` export BUILD_OPT=1 export LIBDIR=%{_libdir} %ifarch x86_64 s390x ppc64 ia64 exp

Re: enabling crypto hardware for NSS

2008-07-23 Thread David Sadler
Is this IBM linux? Red Hat Linux? or ? (I ask because I know that Red Hat Linux supports mod_nss in Apache, but I was not aware that it was also being used in any IBM Linux. That would be good to know.) I am using SUSE 10 Linux, with Red Hat Linux's mod_nss compiled on SUSE Linux. I have a qu

Re: enabling crypto hardware for NSS

2008-07-22 Thread Nelson B Bolyard
I wrote: > I found the bug that is responsible for the fact that no error message > is displayed, and we could fix it, I filed bug 447563 about this. https://bugzilla.mozilla.org/show_bug.cgi?id=447563 Pleas feel free to add yourself to the CC list of that bug if you're interested in updates. _

Re: enabling crypto hardware for NSS

2008-07-22 Thread Nelson Bolyard
David Sadler wrote: > > I am trying to enable crypto hardware support on an IBM z/Series system > running Linux. Is this IBM linux? Red Hat Linux? or ? (I ask because I know that Red Hat Linux supports mod_nss in Apache, but I was not aware that it was also being used in any IBM Linux. That wo

Re: enabling crypto hardware for NSS

2008-07-21 Thread David Sadler
I am trying to enable crypto hardware support on an IBM z/Series system running Linux. webserver1:/etc/apache2 # SPident CONCLUSION: System is NOT up-to-date! foundSLE-10-s390x expected SLE-10-s390x-SP1 webserver1:/etc/apache2 # I run this command .. strace -o modutil.strace.log modut

Re: enabling crypto hardware for NSS

2008-07-15 Thread Nelson B Bolyard
David Sadler wrote, On 2008-07-15 09:24: > > I am trying to setup Apache2, I have enable NSS and software encryption > is working. > I looked at the doc on modutil but when I tried what I thought might > work I got this error. > webserver1:/etc/apache2 # modutil -dbdir /etc/apache2/SampleCertDBs/

Re: enabling crypto hardware for NSS

2008-07-15 Thread David Sadler
I am trying to setup Apache2, I have enable NSS and software encryption is working. I looked at the doc on modutil but when I tried what I thought might work I got this error. webserver1:/etc/apache2 # modutil -dbdir /etc/apache2/SampleCertDBs/ -add IBM_CRYPTO_HDW -libfile /usr/lib64/libopencryp

Re: enabling crypto hardware for NSS

2008-07-14 Thread Nelson B Bolyard
David Sadler wrote, On 2008-07-14 07:08: > > I am trying to find a reference on how to configure NSS to support a > crypto hardware device. > > For openSSL I added "SSLCryptoDevice ibmca" to the httpd.conf file. This > enabled the ibmca engine in SSL. > > What is the counter way to enable a cry

enabling crypto hardware for NSS

2008-07-14 Thread David Sadler
I am trying to find a reference on how to configure NSS to support a crypto hardware device. For openSSL I added "SSLCryptoDevice ibmca" to the httpd.conf file. This enabled the ibmca engine in SSL. What is the counter way to enable a crypto hardware device in NSS. I have an openCryptoki imple