Re: Import PKCS#12 cert into FF

Thank you very much. ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

SSL Client Authentication

I'm a little bit confused with "Ask me every time" option (Tools -> Options -> Advanced -> Security tab). During each SSL handshaking, it asks me _twice_ to select certificate for SSL. Why? ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozi

Re: SSL Client Authentication

John Smith wrote: I'm a little bit confused with "Ask me every time" option (Tools -> Options -> Advanced -> Security tab). During each SSL handshaking, it asks me _twice_ to select certificate for SSL. Why? I've seen that myself over several versions of Mozilla browser and Firefox. I don't

good random data - PR_GetRandomNoise?

We are attempting to add the random K back into an implementation of the DSA algorithm that doesn't currently have it. It uses a 20 byte K seed that it uses to compute a K but that number never changes. We would like to toss that out and use a random 20 byte number. I looked around and found

failed to add a new API in cryptohi (in my local client)

Hi, In my local set up, I have added a new method in cryptohi.h and implement it in secsign.c. The compilation is okay. But I try to use it in certutil/certutil.c and got an undefined symbol linking error for my added API. Same error if after I make clean first. I noticed the public .h file unde

Re: good random data - PR_GetRandomNoise?

David Stutzman wrote: We are attempting to add the random K back into an implementation of the DSA algorithm that doesn't currently have it. It uses a 20 byte K seed that it uses to compute a K but that number never changes. We would like to toss that out and use a random 20 byte number. I l

Re: good random data - PR_GetRandomNoise?

Wan-Teh Chang wrote: Don't use PR_GetRandomNoise. It is designed for this purpose, but its implementation is incomplete. Glad I asked. What did you mean by K seed? Is it the KKEY variable in the algorithm of FIPS 186-2 Appendix 3.2? Yes that's what I'm looking at. Is there a method I can

Re: failed to add a new API in cryptohi (in my local client)

Wei Shao wrote: In my local set up, I have added a new method in cryptohi.h and implement it in secsign.c. The compilation is okay. But I try to use it in certutil/certutil.c and got an undefined symbol linking error for my added API. Same error if after I make clean first. I noticed the publi

Re: failed to add a new API in cryptohi (in my local client)

Julien Pierre wrote: > Wei Shao wrote: > > > In my local set up, I have added a new method in cryptohi.h and > > implement it in secsign.c. > > The compilation is okay. But I try to use it in certutil/certutil.c and > > got an undefined symbol linking error for my added API. Same error if > > afte

Re: problem with multiple certificates from 1 card PKCS11

> I don't know what went wrong here. > > Wan-Teh > Yeah, me neither. As far as the selection of certs goes in the UI, If I select a cert that has key usage of 'Digital Signature, Non-Repudiation (c0)' for signing, it prompts me if I would like to also use it for encryption. Obviously this cert