I am trying to get signed scripts to work on Netscape6. These scripts
work allright in earlier versions of Netscape. With the change of the
security model in Netscape6, I have not been able to get the signed
scripts to work.

I am using the nss-3.3 and nspr-4.1.2 for signing. I got the binaries
from
nspr from - ftp://ftp.mozilla.org/pub/nspr/releases/v4.1.2/
nss from - ftp://ftp.mozilla.org/pub/security/nss/releases/NSS_3_3_RTM/

I place myhtml.html in the signdir directory. I can even verify the
contents of the jar file and it passes the crypto check. I generate
the jar file in the following way:

signtool -k "companyname" -d "certsdir" -Z testnsscript.jar signdir

I access the jar file using the following format:
        "jar:http://wcm-lab.dr.avaya.com/icm/testnsscript.jar!/myhtml.html";;

I get the following error in the Javascript window:

Signature Verification Error: the signature on myhtml.html is invalid
because the digital signature (*.RSA) file is not a valid signature of
the signature instruction file (*.SF).

Thanks
any help is appreciated.
sumesh

PS: My certificate is still valid.

Reply via email to