John Smith wrote:
> When I execute signtool.exe I got this error:
> 
> using certificate directory: C:\Documents and 
> Settings\myusername\Application 
> Data\Mozilla\Firefox\Profiles\vsw8mp7m.default

That's your firefox profile.
You're not running signtool while FireFox is running, right?

> signtool: function failed: An I/O error occurred during security 
> authorization.

"security authorization" means "getting your password".
That's what this error code was originally about.

Unfortunately, in more recent NSS releases, that error code has become
"overloaded" with another meaning, the failure of a PKCS#11 module to
perform any operation.  IMO, NSS really needs a new separate error code,
something like "PKCS#11 module failed", to disambiguate this in the future.

Bob, do you concur?

> I belived my keystore was corrupted, so I deleted key3.db, secmod.db and 
> cert8.db and when I restarted my FF 2.0 it recreated them. Then I reimported 
> my certs (my code signing cert & its issuer) and tried signing again.

reimported from a pkcs12 file? (or pfx file) ?
or from some other kind of file?
Only a PKCS12 file (.p12 or .pfx) can restore your private key.

> Still the same error message. :(
> 
> What should I do? 

Does your key3.db file now contain the private key for your cert?
Is your cert an object signing cert?   Or merely code signing?

-- 
Nelson B
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to