Re: New documentation: NSPR functions required for using NSS

2008-09-08 Thread Kyle Hamilton
On Mon, Sep 8, 2008 at 5:37 PM, Wan-Teh Chang <[EMAIL PROTECTED]> wrote: > On Mon, Sep 8, 2008 at 5:14 PM, Kyle Hamilton <[EMAIL PROTECTED]> wrote: >> I'm pretty sure there are some things that can be done to put a TCP >> socket into a state that's inappropriate for O_NONBLOCK mode, but I >> can't

Re: New documentation: NSPR functions required for using NSS

2008-09-08 Thread Wan-Teh Chang
On Mon, Sep 8, 2008 at 5:14 PM, Kyle Hamilton <[EMAIL PROTECTED]> wrote: > I'm pretty sure there are some things that can be done to put a TCP > socket into a state that's inappropriate for O_NONBLOCK mode, but I > can't think of any off the top of my head. Is there a reference > somewhere that li

Re: New documentation: NSPR functions required for using NSS

2008-09-08 Thread Kyle Hamilton
I'm pretty sure there are some things that can be done to put a TCP socket into a state that's inappropriate for O_NONBLOCK mode, but I can't think of any off the top of my head. Is there a reference somewhere that lists the kinds of things that a programmer needs to avoid? If there is, could the

New documentation: NSPR functions required for using NSS

2008-09-08 Thread Wan-Teh Chang
As part of the work to include NSS in LSB 4.0, I created a list of NSPR functions required for using the NSS SSL functions at http://developer.mozilla.org/En/NSS_reference/NSPR_functions I generated this list by inspecting the source code of libcurl, nss_compat_ossl, mod_nss, and the NSS test prog

Re: How does PK11_GetPadMechanism work?

2008-09-08 Thread Robert Relyea
Nelson B Bolyard wrote: Graham Leggett wrote, On 2008-09-06 12:51: I think a big source of confusion is that everything is an OID, or everything is a mechanism, but not all OID or mechanisms are relevant for every situation, and this isn't clear from each function call. I think this

Re: Problem with JSS on Ubuntu

2008-09-08 Thread Glen Beasley
Marcin T wrote: > Hi > > I finally discovered what is the issue here. In appears that in case > of unsigned applets, the code is unable to access SunJCE provider > You need to spend your time on "signing the applet" correctly. You really don't want to get unsigned applets working by modifying

Re: How does PK11_GetPadMechanism work?

2008-09-08 Thread Robert Relyea
Graham Leggett wrote: Completeness I guess - xml-security's API allowed you to choose both CBC and ECB modes, so I was trying to emulate the same thing. The only mechanism that I cannot find an oid for is CKM_DES3_ECB - do you know which SEC_OID_* macro I should be using? The PK11_Mechanis

Re: How do I reset a password of slot for soft-token after removing the token

2008-09-08 Thread Robert Relyea
Subrata Mazumdar wrote: nsCOMPtr softToken; rv = pkcs11Slot->GetToken(getter_AddRefs(softToken)); softToken->Login(PR_FALSE); // prompts for initializing password . . . softToken->Reset(); // expected that token/slot password would be in the uninitialized state SECMOD_Close

Re: How does PK11_GetPadMechanism work?

2008-09-08 Thread Graham Leggett
Nelson B Bolyard wrote: I think this may only be true because of the involvement of PKCS5v2. If PKCS5v2 was not part of the problem space, I would have said that there was no need to use OIDs at all, none whatsoever. I would have said that PK11_ interfaces exist that can do everything you need

Re: How does PK11_GetPadMechanism work?

2008-09-08 Thread Graham Leggett
Wan-Teh Chang wrote: I don't know either. Does anyone know? Does the lack of a SECOidTag for CKM_DES3_ECB prevent you from using some NSS functionality? I did some web searches for the OID. The OID for DES-EDE is "1.3.14.3.2.17": http://www.alvestrand.no/objectid/1.3.14.3.2.17.html But I'm