<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title></title>
</head>
<body>
<font face="Arial,sans-serif"><font size="2"><br>
<br>
<span type="cite">Aleksey Sanin wrote:</span> </font></font>
<p><font face="Arial,sans-serif" size="2"> </font></p>
<blockquote type="cite"
style="border-left: thin solid blue; padding-left: 10px; margin-left: 0pt;"><font
face="Arial,sans-serif" size="2"> <br>
</font>
<blockquote type="cite" cite="mid3F0E1490.4010307@netscape.com"><font
face="Arial,sans-serif" size="2">xmlsec test harness does not use
pkcs12 at all. I made some changes<br>
to use pkcs12 files. I'll send the changes later with more description.<br>
BTW, openssl "make check" results are identical before and after these<br>
changes. </font></blockquote>
<font face="Arial,sans-serif" size="2"> Good. Seems ok to me except
the <br>
<br>
--pkcs12[:name] <p12file>[,<cafile>[,<cafile>...]]]<br>
<br>
IMHO, PKCS12 file should contain all the certs. But I guess I
understand the <br>
problem with changing tests suite :) What's the problem with NSS and
PKCS8?<br>
No way to load private key w/o public at all?</font></blockquote>
<font size="2"><font face="Arial,sans-serif">Nope :(. After a lot of
experimenting and lengthy discussions.... decided to<br>
stop pursuing it.<br>
</font></font>
<blockquote type="cite"
style="border-left: thin solid blue; padding-left: 10px; margin-left: 0pt;"><font
face="Arial,sans-serif" size="2"><br>
<br>
</font>
<blockquote type="cite" cite="mid3F0E1490.4010307@netscape.com"><font
face="Arial,sans-serif" size="2">The changes in a nutshell:<br>
</font></blockquote>
<font face="Arial,sans-serif" size="2"> All seems ok to me (see note
above about 1) )<br>
<br>
</font>
<blockquote type="cite" cite="mid3F0E1490.4010307@netscape.com"><font
face="Arial,sans-serif" size="2">What I'm looking for is a way to do
some nss-specific stuff<br>
as part of the test harness, </font></blockquote>
<font face="Arial,sans-serif" size="2"> What about this: the
xmlsec-nss creates keydb if needed (i.e. if there is nothing there)<br>
plus before and after executing tests you put <br>
@rm -rf keydb<br>
No need to have "if" in the Makefile :) Believe me, you don't want this
:)</font></blockquote>
<font size="2"><font face="Arial,sans-serif">ok, will see what can be
done.</font></font><br>
<blockquote type="cite"
style="border-left: thin solid blue; padding-left: 10px; margin-left: 0pt;"><font
face="Arial,sans-serif" size="2"><br>
<br>
BTW, because of OSCON I am late in reviewing the patch you've send.<br>
I did about 30% on flights to and from Portland but there is still a
lot to do. I'll try<br>
to finish this stuff next week but I am waiting for licenses issues
resolved <br>
before I can check it in.</font></blockquote>
<font size="2"><font face="Arial,sans-serif">No problem. <br>
About licensing, all you need is something written from my company that<br>
it is ok to contribute my work to xmlsec, right?. Will work on that next<br>
week.<br>
<br>
</font></font>
</body>
</html>