<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body>
<br>
<blockquote type="cite" cite="mid3F0E1490.4010307@netscape.com">xmlsec
test harness does not use pkcs12 at all. I made some changes<br>
to use pkcs12 files. I'll send the changes later with more description.<br>
BTW, openssl "make check" results are identical before and after these<br>
changes. </blockquote>
Good. Seems ok to me except the <br>
<br>
--pkcs12[:name] <p12file>[,<cafile>[,<cafile>...]]]<br>
<br>
IMHO, PKCS12 file should contain all the certs. But I guess I
understand the <br>
problem with changing tests suite :) What's the problem with NSS and
PKCS8?<br>
No way to load private key w/o public at all?<br>
<br>
<blockquote type="cite" cite="mid3F0E1490.4010307@netscape.com">The
changes in a nutshell:<br>
</blockquote>
All seems ok to me (see note above about 1) )<br>
<br>
<blockquote type="cite" cite="mid3F0E1490.4010307@netscape.com">What
I'm looking for is a way to do some nss-specific stuff<br>
as part of the test harness, </blockquote>
What about this: the xmlsec-nss creates keydb if needed (i.e. if there
is nothing there)<br>
plus before and after executing tests you put <br>
@rm -rf keydb<br>
No need to have "if" in the Makefile :) Believe me, you don't want this
:)<br>
<br>
BTW, because of OSCON I am late in reviewing the patch you've send.<br>
I did about 30% on flights to and from Portland but there is still a
lot to do. I'll try<br>
to finish this stuff next week but I am waiting for licenses issues
resolved <br>
before I can check it in.<br>
<br>
<br>
Aleksey<br>
<br>
<br>
</body>
</html>