Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-07-05 Thread samrat saha
Sorry for the delayed reply. I want to create a CA backup store with the default CA certificate provided by the NSS library. While my process boots up i want all these CA certificate to be present in the certificate database. Thanks, Samrat On 7/6/07, samrat saha <[EMAIL PROTECTED]> wrote: > >

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-07-05 Thread samrat saha
Sorry for the delayed reply. I want to create a CA backup store with the default CA certificate provided by the NSS library. While my process boots up i want all these CA certificate to be present in the certificate database. Thanks, Samrat On 7/2/07, Nelson B <[EMAIL PROTECTED]> wrote: > > sam

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-07-02 Thread Nelson B
samrat saha wrote: > Dear Nelson, Below is the problem in detail.. > > I am trying to extract the built in Root CA certificate in the nss to a > certificate bag file (PEM format dumbed from libnssckbi.so). Using the > about certificate bag file i am trying to build a database during > intilization

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-07-01 Thread samrat saha
Dear Nelson, Below is the problem in detail.. I am trying to extract the built in Root CA certificate in the nss to a certificate bag file (PEM format dumbed from libnssckbi.so). Using the about certificate bag file i am trying to build a database during intilization which will contain all the bui

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-07-01 Thread samrat saha
Dear Nelson, Below is the problem in detail.. I am trying to extract the built in Root CA certificate in the nss to a certificate bag file (PEM format dumbed from libnssckbi.so). Using the about certificate bag file i am trying to build a database during intilization which will contain all the bui

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-07-01 Thread samrat saha
Dear Nelson, Below is the problem in detail.. I am trying to extract the built in Root CA certificate in the nss to a certificate bag file (PEM format dumbed from libnssckbi.so). Using the about certificate bag file i am trying to build a database during intilization which will contain all the bui

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-07-01 Thread Nelson B
samrat saha wrote: > I was trying to create the CA store using the buildin CA certificates in > libnssckbi library. What problem are you trying to solve. libnssckbi already contains all the stored root CAs. Do you need a different list? A smaller list? What's the problem with the list? Do you

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-06-28 Thread David Stutzman
samrat saha wrote: > Thanks! > But is there anyway around to extract the trust flags. Due to the library > size limitation, i can not keep the library > in the database directory but i need to have the complete CA certificate in > the databass. If you'd like to make it smaller, You can build your

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-06-28 Thread Eddy Nigg (StartCom Ltd.)
Perhaps Nelson, Kai or one of the other NSS people know how to extract the trust bits which were set for NSS. However if you only need the CA certificates - similar to a ca-bundle - then you should be OK already with what you have. -- Regards Signer: Eddy Nigg, StartCom Ltd. Jabber:

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-06-28 Thread samrat saha
Thanks! But is there anyway around to extract the trust flags. Due to the library size limitation, i can not keep the library in the database directory but i need to have the complete CA certificate in the databass. Thanks In Advance, Samrat On 6/28/07, Eddy Nigg (StartCom Ltd.) <[EMAIL PROTECTE

Re: libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-06-28 Thread Eddy Nigg (StartCom Ltd.)
The trust flags are for internal usage of the NSS store and not really part of the CA certificates. You might find however the associated x.509 key usage and x.509 extension in the certificate. Judging from your code snippet below, you extract the x.509 certificates, which don't have those trus

libnssckbi.so problems with ROOt ca ceritifcate Trust flags

2007-06-28 Thread samrat saha
Dear All, I was trying to create the CA store using the buildin CA certificates in libnssckbi library. I was extracting the certificate from the module using the following code snippet. cert_list = PK11_ListCertsInSlot(slot); for(cert_node = CERT_LIST_HEAD(cert_list); !CERT_LIST_