Questions tagged [nss]

Network Security Services (NSS) is a set of libraries designed and maintained by Mozilla to support cross-platform development of security-enabled client and server applications.

Network Security Services (NSS) is a set of libraries designed and maintained by Mozilla to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.

169 questions
0
votes
0 answers

How to use the certificate from the NSS database in CURL from the PHP file?

I have a pfx certificate which dosent work with curl command. Than I am try to import this file to NSS DB and after this curl command from terminal will work, but i can’t figure out how to add this certificate to curl in php file. import certificate…
Alex
  • 1
  • 4
0
votes
1 answer

Getting SEC_ERROR_BAD_PASSWORD error on using libnss API PK11_Authenticate()

We have a use case to list certificates from USB dongles (ePass2003Auto and such types) which will be used for signing PDFs. Env: Ubuntu 20.04 Libs: libnss* APIs and others like libssl libcrypto libnss3 libnssckbi libnssdbm3 libnssutil3…
0
votes
0 answers

Force my php to use OpenSSL instead of NSS?

I have a LAMP configuration with CentOS 7 and php 7.4. My php curl version is 7.8.0 with SSL Version NSS/3.53.1 When I try to connect to a server its showing error "unable to load client key: -8178 (SEC_ERROR_BAD_KEY)". Reason for this error is its…
Nakul
  • 77
  • 9
0
votes
1 answer

CKR_KEY_TYPE_INCONSISTENT: when deriving signing key in FIPS mode using SunPKCS11 with NSS

Environment details: Java: openjdk-1.8.0.312 OS: RHEL8 Following are the security providers configured. SunPKCS11-NSS-FIPS, SUN 1.8, SunEC 1.8, SunJSSE 1.8 Note: The issue disappears when added a new JCE. Worked when added SunJCE or…
Kedarnath
  • 260
  • 1
  • 3
  • 13
0
votes
0 answers

Unable to complete SSSD lookup to LDAP source

I set up an LDAP service on a computer in my home network. I can run ldapsearch commands from my desktop to it and they return with no problem. What I'm unable to do is to get authentication via LDAP working. [Note: desktop is running the latest…
Derek
  • 9
  • 3
0
votes
0 answers

Initializing NSS with certpath: sql:/etc/pki/nssdb error

I use Centos 7 and curl version is curl 7.29.0 and i want send email with this structure: curl --url "smtps://mail.domain.com:587" --ssl-reqd --mail-from "username@domain.com" --mail-rcpt "account@gmail.com" --upload-file /root/mail.txt --user…
pyramid13
  • 266
  • 1
  • 5
  • 21
0
votes
1 answer

Curl failed: NSS: client certificate not found (nickname not specified) - On Centos 7

I know this has been asked on SO before but I think my situation is a little bit different: When I'm trying to use curl inside PHP I receive the following error when trying to interact with apples push notification service…
fogbreaker
  • 31
  • 1
  • 4
0
votes
2 answers

NSS 32 bit package on Java 64 bit

I have Windows 7 with 64 bit environment. Configuring gateway, I run NSS3.12.4 32 bit on 64 bit platform and got this error. Libnspr4.dll Can't load IA 32 bit .dll on AMD 64 bit platform Java is 64 bit. How to get NSS 64 bit package? Is there any…
Lana
  • 1
  • 1
0
votes
1 answer

Writing a custom nss hosts module

I'm seeking to implement a custom nss module for the getent hosts lookup. Based on glibc's resolv/nss-dns/dns-host.c and gnunet's src/gns/nss/nss_gns.c I wrote the following minimal implementation that I hoped at least should write something to…
lash
  • 746
  • 1
  • 7
  • 23
0
votes
1 answer

curl command works but C program fails NSS: client certificate not found (nickname not specified)

there are a number of similar posts but I am trying to understand a little more than what those offer. My curl commandline works fine and am able to talk to the server and get the data I want. The command looks like curl -v --tlsv1.2 --cert…
kaykay
  • 81
  • 1
  • 9
0
votes
1 answer

NSS+Pam+Tacacs+ firs session fails

I have device that i want to autorize to using TACACS+ server. I have TACACS version: tac_plus version F4.0.4.26 I have tacacs server with next configuration accounting file = /var/log/tac_plus.acct key = testing123 default authentication = file…
Alex S
  • 66
  • 5
0
votes
1 answer

nss 3.35 issue with nspr 4.19 PR_GetEnvSecure function

I am getting the following error while building nss 3.35 version secoid.c:(.text.SECOID_Init+0x36): undefined reference to PR_GetEnvSecure' secoid.c:(.text.SECOID_Init+0x55): undefined reference toPR_GetEnvSecure' I am using nspr version 4.19 to…
niraj pandey
  • 102
  • 7
0
votes
1 answer

libcurl-NSS built Imap with tls :SSL CA cert (path? access rights?) windows

I am currently trying to make an imap client with libcurl on a windows application. I am using a prebuilt version of libCurl built with NSS support but no OpenSSL support ( that was decided by an higher up), and when I try to connect to my server …
essadiel
  • 1
  • 4
0
votes
1 answer

java: symbol lookup error: /lib64/libnssutil3.so: undefined symbol: PR_GetEnvSecure in Oracle Linux 7.5

Good day. What need to do if the script execution leads to a problem java: symbol lookup error /lib64/libnssutil3.so? I try install Oracle IDM 11gR2 (11.1.2.3) on Oracle Linux 7.5. Already installed Oracle Databace 12c, OIM RCU, WebLogic, SOA and…
MaysSpirit
  • 43
  • 2
  • 8
0
votes
1 answer

QPID C++ Broker and QPID-CPP SSL Certificates

I am trying to set up SSL with QPID and I'm having trouble figuring out how to set up the certificates. I have made a certificate database and added a self signed certificate to it like so: mkdir ${CERT_DIR} certutil -N -d ${CERT_DIR} -f…
Sam
  • 48
  • 7