Questions tagged [nss]

Network Security Services (NSS) is a set of libraries designed and maintained by Mozilla to support cross-platform development of security-enabled client and server applications.

Network Security Services (NSS) is a set of libraries designed and maintained by Mozilla to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.

169 questions
2
votes
1 answer

How to use NSS with Jetty?

I am trying to setup Jetty to use NSS as its cryptographic engine. I have gotten it to the point where the server starts BUT any client that tries to connect seems to hang in the browser. The setup process / code I am following is as follows (32-bit…
chotchki
  • 4,258
  • 5
  • 34
  • 55
1
vote
1 answer

Curl error 77 on 64bit machine

When I run a 32-bit binary on 64-bit RHEL6.2, I get the following output from Curl with return value 0f 77, * About to connect() to 10.30.10.164 port 443 (#0) * Trying 10.30.10.164... * connected * Connected to 10.30.10.164 (10.30.10.164) port 443…
1
vote
0 answers

NSS PKCS11 not working well as jsse provider

I'm using Network Security Services as my Sun PKCS#11 provider for my Java application and I'm experiencing some undesired behavior. reinserting the same trusted certificate into the Keystore will delete the trust attributes that were successfully…
Mike
  • 401
  • 1
  • 6
  • 15
1
vote
0 answers

java.security.ProviderException: Could not create trust object

I have Java application running on two different servers. On the 1st server while the application is trying to insert a X.509 certificate to NSS keystore it is getting the following error: Failed to store public key certificate in keystore. Cause:…
Petaluma007
  • 41
  • 1
  • 4
1
vote
0 answers

SEC_ERROR_UNKNOWN_PKCS11_ERROR when trying to run curl command in rhel7

I am trying to run curl command from Red Hat Enterprise Linux 7 server with curl below:- *curl -0 -v --cert-type p12 --cert /mycert.p12: --cacert /my_sec_cert.cer -X GET "https://"* and ended up with the error :- unable to load client…
DeadPool
  • 40
  • 8
1
vote
0 answers

KeyStore.setKeyEntry not working in FIPS mode

I am using RHEL 8.3 with FIPS mode on and openjdk 1.8.0.265. I am using the following token for initializing the Keystore. name = NSSfips nssLibraryDirectory = /usr/lib64 nssSecmodDirectory = nssModule = fips For keypair generation…
Paul Schimmer
  • 161
  • 3
  • 22
1
vote
0 answers

CentOS6 - curl NSS error -5961 resolved by updating packages. What did it actually do?

I was running into the same issue as described in this question: cURL SSL connect error 35 with NSS error -5961 $ curl --verbose https://api.hostname.com …
F Tomex
  • 13
  • 1
  • 6
1
vote
2 answers

Help to quick start NSS

I am starting into NSS and I managed to build it. The outcome was placed in a folder named dist and has several subfolders that contain several exe's dlls etc. dist /WINNT6.0_DBG.OBJ /bin /include /lib I…
Cratylus
  • 52,998
  • 69
  • 209
  • 339
1
vote
1 answer

Can’t use Mozilla’s cert9.db with certutil.exe

The following command: certutil.exe -L -d “C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\1bku2z91.default-1633392324717\” returns this error message: certutil.exe: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is…
miran80
  • 945
  • 7
  • 22
1
vote
1 answer

Add certificate to certdata.txt and build firefox with them

I have to add some certificates to firefox before building it. Then test it with this certificates. I know that certificates are hardcoded into the certdata.txt, in this location: mozilla-source\mozilla-central\security\nss\lib\ckfw\builtins I've…
Alikhan247
  • 21
  • 8
1
vote
1 answer

NSS Build failure due to assembly code Windows 10 64bit machine

I am building 64-bit nss 3.39 on Windows 10 with Microsoft Visual Studio 2017. It failed with the error: error C4235: nonstandard extension used : '__asm' keyword not supported on this architecture Has anyone faced this issue? Need solution on…
Kishor Jadhav
  • 196
  • 2
  • 16
1
vote
0 answers

SSL peer had some unspecified issue with the certificate it received

I have this error SSL peer had some unspecified issue with the certificate it received. I'm use centos, NSS library. curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($fields)); curl_setopt($ch, CURLOPT_POST,1); curl_setopt($ch,…
1
vote
2 answers

HTTP GET using cURL is giving SSL error

I have written a REST server which listens on port 8000. I am trying to invoke the api from the same machine using the cURL command - curl -H "accept: application/json" https://localhost:8000/status -v I am getting the following error * About to…
aniztar
  • 2,443
  • 4
  • 18
  • 24
1
vote
0 answers

Build NSS 3.35 to get Certutil in Windows 10. Error, C Compiler cannot create executables

I would like to Install a certificate programmatically on Firefox version 59. I read that i need CertUtil, but the certutil code that i got on github is built from old NSS. so it only generates cert8.db and not Cert9.db, which Firefox 59 needs i…
Rommel Sudan
  • 41
  • 1
  • 2
  • 6
1
vote
0 answers

mozilla nss bltest failed

I built nss package from source and then ran bltest -F (FIPS test) on my CentOS 7. It failed. Traced the code, I found it failed in: blapi_SHVerifyFile(const char *shName, PRBool self) because it cannot…
pokeba
  • 81
  • 1
  • 5