<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body>
Since NSS does not have an ability to load private keys from clear form,<br>
then probably the right approach for tests suite would be to just use
keys <br>
from key db. Probably this means that xmlsec-nss should just ignore <br>
private keys from xml keys file. For example, there would be one more<br>
command line parameter for xmlsec utility:<br>
--crypto-config <path><br>
with path to crypto config folder. For NSS that would be path to keys
and <br>
certs db. You will prepare keys/certs db with same keys as keys and
certs <br>
in tests/keys/* and in other subfolders test/*.<br>
<br>
I don't like this approach but it seems natural for NSS world. The only <br>
thing I would like to think of is how to generalize it to make it less
NSS specific.<br>
<br>
<br>
Aleksey<br>
<br>
<br>
</body>
</html>