certificate requirements for crypto.signText

I've been playing with crypto.signText for a couple of weeks in the hopes of using it to build web front-ends for XML-Signature applications. At this stage, technically, it all works fine, aside from one annoying quibble, which is that mozilla wants a certificate to use as the signing identity for

Re: Adding Ciphers

Jay Potter wrote: > Can a PKCS#11 module be proprietary? I would not want to publicize the > intricacies of the USB device, but rather provide a mechanism where > others could utilize its capabilities within their own projects. Yes, the whole point of PKCS#11 is to allow makers of proprietary cr

Re: NSS PKCS#11 implementation

Hello Bob, Thank you for your reply. Bob Relyea wrote: Alon Bar-Lev wrote: Hello, I am using Mozilla applications for a long time I enjoy it, but the PKCS#11 implementation always worried me. 1. It prompts for PIN every time the token is accessed (Does not use the public objects if exists

Re: NSS PKCS#11 implementation

Alon Bar-Lev wrote: Hello, I am using Mozilla applications for a long time I enjoy it, but the PKCS#11 implementation always worried me. 1. It prompts for PIN every time the token is accessed (Does not use the public objects if exists). This is probably because the token does not keep it's l

Re: Adding Ciphers

Jay Potter wrote: Can a PKCS#11 module be proprietary? Yes. As far as I know most if not all PKCS#11 modules for real-life hardware tokens are distributed under proprietary licenses in binary form only. The Mozilla source code used in, e.g., Firefox is made available under the Mozilla Public

Re: NSS_Shutdown failure

Nelson B wrote: Umesh Bywar wrote: Hi all: Welcome to the list, Umesh. I am working on writing an xpcom component that checks which ciphers work with a given target. So basically, I have a component which acts as a SSL client and performs a handshake by setting a given cipher.

Re: Adding Ciphers

Nelson B wrote: Jay Potter wrote: Nelson, We are planning on using a USB device that has keys for various vendors in a "private" area. The USB device can generate a session key based upon that secret vendor key. The Server can autogenerate that same session key. The session key does not hav

Re: Digital sign data with etoken

Rodrigo Parente wrote: Hello, sorry for my english... I´m new at web developing and i need to know how to sign data and documents from Firefox using my certificate stored in a Alladin etoken. I´ve already installed the PKCS#11 module and i can login into the token from firefox, but i don´t know

NSS PKCS#11 implementation

Hello, I am using Mozilla applications for a long time I enjoy it, but the PKCS#11 implementation always worried me. 1. It prompts for PIN every time the token is accessed (Does not use the public objects if exists). 2. It does not prompt for token insert if the token is unavailable. For exa

Digital sign data with etoken

Hello, sorry for my english... I´m new at web developing and i need to know how to sign data and documents from Firefox using my certificate stored in a Alladin etoken. I´ve already installed the PKCS#11 module and i can login into the token from firefox, but i don´t know how to make the firefox a

Re: SSL/TLS upgrades - RFC2817

2817-style upgrades were added to mod_ssl I think purely as a well-intentioned (but perhaps naive) attempt to solve the SSL vs name-based virtual hosting problem, which is something we see Apache users ask for, and get confused by, almost daily. I agree it is basically useless: you didn't ment