Questions tagged [nss]

Network Security Services (NSS) is a set of libraries designed and maintained by Mozilla to support cross-platform development of security-enabled client and server applications.

Network Security Services (NSS) is a set of libraries designed and maintained by Mozilla to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.

169 questions
2
votes
1 answer

Decrypt TLS in golang by storing SSL key to be used with Wireshark

I am trying to establish a TLS connection by providing a tls.Config struct containing a Rand field that should always return the same int when calling their Read method, cf. the docs here: https://golang.org/pkg/crypto/tls/#Config I've written this…
TPPZ
  • 4,447
  • 10
  • 61
  • 106
2
votes
1 answer

How do I build python-nss and NSS for Mac OS X?

I'm trying to build python-nss, a python interface for the Mozilla NSS library, on a 64-bit Mac running Mac OS 10.6.5, for use in python software running on Mac OS X 10.6 or later. I can get NSS itself to build successfully, using certain options,…
Nathan Craike
  • 5,031
  • 2
  • 24
  • 19
2
votes
1 answer

Access mozilla firefox certificate store to HCERTSTORE

Need to add custom certificate "MycustomCert.pem" trusted list in Mozilla Firefox certificate store. How can I modify the trusted Certificate list in Mozilla Certificate store ? Sample code of getting windows ROOT certificate store. Instead of root…
Jithin Jose
  • 69
  • 1
  • 9
2
votes
0 answers

NSS DTLS sample application codes

Is there sample standalone "application" codes of utilizing NSS DTLS/SRTP features somewhere available? There are sample application codes of cmd & tests that utilize SSL3/TLS features that come with NSS Mozilla releases, but none for DTLS features…
J Y
  • 21
  • 2
2
votes
0 answers

client certificate not found

What can I do to troubleshoot/fix why my curl command cannot find my certificate when referencing to it by its nickname I am trying to get a secure connection to a bank server, that is handling our online payments, using curl. The server is using…
tuberider
  • 124
  • 9
2
votes
2 answers

CentOS PHP curl unable to negotiate an acceptable set of security parameters

On an Ubuntu 14.04.3 this code works fine: $url_login = "https://test.example.com/login.do"; $cert_file = '/var/www/html/test/cert.pem'; $ssl_key = '/var/www/html/test/cert_private.pem'; $post_fields =…
Andreas Hinderberger
  • 1,505
  • 23
  • 41
2
votes
2 answers

Unable to locate package nss-devel - Ubuntu 14.04

What is the debian equivalent of nss-devel package? apt-get install nss-devel is not working.
KurinchiMalar
  • 598
  • 3
  • 12
  • 28
2
votes
1 answer

Build Mozilla NSS tools for MAC OSX 10.10

When I check out the hg repo nss and nspr in a folder and run make nss_build_all in the nss folder, I got this error. Instruction as given here. Did anybody successfully build nss tools in mac? How can I resolve this…
karim
  • 15,408
  • 7
  • 58
  • 96
2
votes
0 answers

How can I debug what's happening inside a NSS library function?

I'm trying to replicate the behaviour of NSS lib's PK11_PrivDecryptPKCS1 function in my code so I can pinpoint why it's failing. It's always returning a SECFailure. I have seen here that this function creates a parameter and calls…
Nelson Teixeira
  • 6,297
  • 5
  • 36
  • 73
2
votes
2 answers

PK11_Sign with padding

From http://www-archive.mozilla.org/projects/security/pki/nss/tech-notes/tn7.html, it states that For a low level signature, use PK11_Sign(). Both of these functions do the PKCS #1 wrapping of the data. PK11_Sign does not do the BER encoding of…
Nona Haron
  • 171
  • 1
  • 1
  • 6
2
votes
1 answer

Extract or set private key parameters in cryptoki library

I ran into some issues writing a small test programme using the cryptoki library. I want (have) to get hold of the RSA private key (all its parameters). I thought about either generate keys and then extract the parameters or use already generated…
Rick
  • 121
  • 14
2
votes
1 answer

Java EE 6 and Certutil

I have installed Java EE 6 with GlassfishV3. I want to use NSS tools to manage the security of the server, i.e generating certificates using certutil. However I can't find the NSS library and tools in Glassfish. On the other hand, I read the…
sgres
  • 23
  • 3
2
votes
2 answers

How to build openSSH with NSS or GnuTLS instead of OpenSSL?

Due to security issues with OpenSSL, I would like to use NSS or GnuTLS instead. For Apache server needs, it is easy since there exist a module for each one. But for SSH, it looks like difficult if not impossible. Dropbear embeds its own algorithms…
lalebarde
  • 1,684
  • 1
  • 21
  • 36
2
votes
1 answer

Building NSS (Network security services) for Mac OS X 10.9 not working

I am trying to build NSS source codes (https://developer.mozilla.org/en-US/docs/NSS) version 3.15 on OS X 10.9. I have downloaded the NSS and NSPR package and based on the instructions I have CDed into NSS folder and entered: make…
neutral_sphere
  • 61
  • 1
  • 1
  • 7
2
votes
1 answer

Are there any difference between RSA_Sign() of NSS and RSA_sign() of Open SSL

When i use the RSA_Sign() of NSS and fips_rsa_sign_digest() of Open SSL i get different signature value. Are there any difference in the functionality of these two? Same parameter/private key is input to these 2 functions with proper conversion for…
ash
  • 21
  • 2