a minor nit-pick with certutil

2009-05-15 Thread kashyap
Hi,

  *-W* option(to change password of the key database) is not listed when we
do a certutil -H.

But the functionality do work fine, if we try to change an existing password
of the nss key database by using
*certutil -W -d /home/user/.mozilla/firefox/xx.default/*

I observed this on version -> nss-tools-3.12.2.0-5.fc10.i386
I have not checked with the latest nss-tools package.

--kashyap
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: failed to generate key using window.crypto.generateCRMFRequest() method

2009-05-15 Thread Wan-Teh Chang
On Thu, May 14, 2009 at 8:53 PM, Subrata Mazumdar
 wrote:
>
> I just have another question. According to the source code
> (http://mxr.mozilla.org/security/source/security/nss/lib/cryptohi/secsign.c#92)
>  signing with EC key is disabled irrespective of underlying security device.
> What about if I am using a Smart Card with licensed ECC implementation, such
> as Athena's ASECard?

If it is an option for you to use custom-built NSS libraries
with Firefox, you can follow the instructions at
http://pki.fedoraproject.org/wiki/ECC_Capable_NSS
to build a version of NSS that doesn't have a built-in ECC
implementation but can be configured to use a third-party
ECC implementation with no crippled functionality.  That
wiki page is intended for exactly your scenario.

Wan-Teh
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: a minor nit-pick with certutil

2009-05-15 Thread Nelson B Bolyard
kashyap wrote, On 2009-05-15 00:57:
> Hi,
> 
>   *-W* option(to change password of the key database) is not listed when
> we do a certutil -H.
> 
> But the functionality do work fine, if we try to change an existing
> password of the nss key database by using
> *certutil -W -d /home/user/.mozilla/firefox/xx.default/*
> 
> I observed this on version -> nss-tools-3.12.2.0-5.fc10.i386
> I have not checked with the latest nss-tools package.

Please file a bug in bugzilla.mozilla.org
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto