Dave Townsend wrote, On 2008-05-30 03:59:
> Thanks for filing the bug Nelson.
> 
> I don't suppose anyone has any idea of how I might be able to work 
> around this issue for the time being? 

Earlier, you wrote:

>> I also tried this with a shared db as Robert suggested and it appears to
>> work correctly there in the test program I have.

Is that an adequate solution?

> My app is based on XULRunner which will be released with NSS_3_12_RC3 so
> for the time being I have to work with that.

I don't know much about your application, but it it is stand-alone,
then it seems to me that the shareable DB solution is a good one.

Those shareable DBs are the wave of the future for NSS.  Just think of
yourself as an early adopter.  Maybe yours will be the first application
to prominently feature that new generate of NSS DBs.

As I understand it, by using the shareable DB, you don't need any NSS
modification.  A solution that requires no modification to NSS seems
far better than one that does.

> I can see from the implementation that I could extract the 
> SECKEYPublicKeyInfo structure myself but not get any further than that. 

You can extract an SPKI from an EncryptedPrivateKeyInfo ?

> Is there a way for me to spot that a matching key is already there using 
> just that at all?

If you can get the public key info, then I believe there is a pretty
simple way to ask if you have the private key for it.  I can look that
up.  But if shareable DBs solve your problem, I think that's your best
answer.

/Nelson
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to