Re: Generation of key pair and CSR

Hi, I would like to create a plug-in for Firefox that, when invoked, generates a new key in the Firefox key/certificate store. Is it possible to generate a new keypair in using NSS from the plug-in, or do I need to somehow call crypto.generateCRMF() via javascript from the plug-in? Thanks in adv

How to refresh Firefox keystore

Hi, I have an applet that uses JSS to import an RSA keypair into Firefox's keystore, as per the following code. CryptoManager.initialize("C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\y78kp7l6.default"); CryptoManager manager = CryptoManager.getInstance();

Re: How to refresh Firefox keystore

I'm importing the key pair into the browser's soft token. I can see that the cert8.db and key3.db files in the profile directory are updated and I can also see the new certificate using certutil.exe -L. However when attempting to connect to a website that requires client SSL authentication in th

Re: How to refresh Firefox keystore

rd-2 wrote: > > On 2010-07-01 18:10 PDT, james07 wrote: >> I'm importing the key pair into the browser's soft token. >> >> I can see that the cert8.db and key3.db files in the profile directory >> are >> updated and I can also see the new certificate

Re: How to refresh Firefox keystore

Thanks, the new database format indeed did the trick. I'm able to see the new certificate in Certificates Manager following the import. However I'm now getting a strange connection error when attempting to access a test web site which requires SSL client authentication. If I unset the environment

Re: How to refresh Firefox keystore

Apologies. The connection error was due to sec_error_invalid_key. Setting the right key usage when importing the private key fixed it. Thanks again everyone for your help and suggestions. Truly appreciated. James -- View this message in context: http://old.nabble.com/How-to-refresh-Firefox-ke

Link error on CERT_AddExtensionByOID

Hi, I wish to call CERT_AddExtensionByOID() in my application. However I get "error LNK2019: unresolved external symbol _CERT_AddExtensionByOID" when building the application. Calling CERT_AddExtension() is okay. I'm using the NSS-3.12.6_NSPR-4.8.4 package. Am I missing something? Many thanks.

Re: Link error on CERT_AddExtensionByOID

Thanks, guess I have to implement a similar function in my code then? Bit of a shame it is not being exported for public consumption. I imagine its usage would be quite common, no? Cheers, James Konstantin Andreev-2 wrote: > > This is an ancient [bug 294538], six years (sic!) old. > > CERT_A

Importing client SSL certificate onto external PKCS#11 token

Hi, I have added an external PKCS#11 token via Device Manager in Firefox 3.6.15. I then import a PKCS#12 file containing a client SSL key and certificate signed by a trusted CA, specifying the external token as the key and certificate store. The import is successful however when I attempt to acce

Re: Importing client SSL certificate onto external PKCS#11 token

> There used to be a 'logout all' button somewhere in the browser. I don't > know if it still exists. That button would flush all our SSL caches and > force full handshakes. Thanks... logoutAndDropAuthenticatedResources() did it for me. -- View this message in context: http://old.nabble.com/Im

Detect SSL client authentication

The nsIWebProgressListener interface includes the onSecurityChange method which indicates whether a connection is secured. However it doesn't distinguish between server authentication and client authentication. Is there a way to check whether client authentication was performed? Thanks in advance