Re: Should PK11_Derive() save the failure status?

2017-02-22 Thread Robert Relyea

On 02/22/2017 10:44 AM, Andrew Cagney wrote:

Hi,

I've got a PK11_Derive() call failing (presumably something silly on
my part), but frustratingly, PORT_GetError() just returns 0.

It seems that all variants of PK11_Derive() don't call:

 PORT_SetError(PK11_MapError(crv));

with the error status from ->C_DeriveKey().  Should they?


Yes, please write a bug on this. The mapping should happen directly 
after the C_DeriveKey() call.


bob

   Or is there
some other way (short of debugging) to get at least a hint has to my
error.

Andrew



--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Should PK11_Derive() save the failure status?

2017-02-22 Thread Andrew Cagney
Hi,

I've got a PK11_Derive() call failing (presumably something silly on
my part), but frustratingly, PORT_GetError() just returns 0.

It seems that all variants of PK11_Derive() don't call:

PORT_SetError(PK11_MapError(crv));

with the error status from ->C_DeriveKey().  Should they?  Or is there
some other way (short of debugging) to get at least a hint has to my
error.

Andrew
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Looking for Pkiutil binaries

2017-02-22 Thread Abdelhak Brrem
Hello.

Does anyone know where can i get the pkiutil.exe file ? i think it's the only 
tool that can list the builtin root ACs stored in nssckbi.dll.
i found its source code in the NSS 3.8, but i didn't manage to build it. 

Thank you.
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: How can i list Builtin Root ACs ?

2017-02-22 Thread Abdelhak Brrem
Le mardi 21 février 2017 15:57:41 UTC+1, Kai Engert a écrit :
> On Tue, 2017-02-21 at 06:40 -0800, Abdelhak Brrem wrote:
> > Does anyone knows how to list the builtin root ACs stored in the nssckbi.dll
> > file ?.
> 
> If you're asking about certutil, you can use the "-h all" parameter to list
> certificates from all tokens.
> 
> But by default certutil doesn't load nssckbi.dll
> 
> You can create a new database using "certutil -N", then use modutil to add the
> nssckbi.dll as a module to your database, then "certutil -L -h all" should 
> work.
> 
> Kai

I tried this but unfortunately it did not work 
i get this error:
ERROR: Failed to add module "nssckbimod". Probable cause : "error 127".

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto