<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<TITLE>Nachricht</TITLE>
<META content="MSHTML 6.00.2900.2523" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN
class=781443912-11012005>Hi,</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=781443912-11012005></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=781443912-11012005>I try to use xmlsec
with NSS 3.9.2. The nss tests are OK. Some xmlsec tests deliver error,
e.g:</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=781443912-11012005></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=781443912-11012005>--- testDSig started
for xmlsec-default library (20050111_133044)<BR>---
LD_LIBRARY_PATH=/cygdrive/c/project/batch_nss/install/lib<BR>--- log file is
win32\tmp/testDSig.20050111_133044-2952.log<BR>merlin-xmldsig-twenty-three/signature-enveloped-dsa<BR>
Verify existing
signature
OK<BR> Create new
signature
Fail<BR> Verify new
signature
Fail<BR>merlin-xmldsig-twenty-three/signature-enveloping-dsa<BR>
Verify existing
signature
OK<BR> Create new
signature
Fail<BR> Verify new
signature
Fail</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=781443912-11012005></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=781443912-11012005></SPAN></FONT> </DIV>
<DIV><FONT><SPAN class=781443912-11012005><FONT face=Arial size=2>I think, it
cannot import the pkcs12 private key. nss/lib/softoken/pksc11.c:</FONT><FONT
size=2><FONT face=Arial>pk11_handleObject<SPAN class=781443912-11012005>
</SPAN></FONT><FONT face=Arial>returns CKR_USER_NOT_LOGGED_IN.
</FONT></FONT></SPAN></FONT></DIV>
<DIV><FONT><SPAN class=781443912-11012005><FONT size=2><FONT face=Arial>The logs
are:</FONT></FONT></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=781443912-11012005></SPAN></FONT> </DIV>
<DIV><FONT><SPAN class=781443912-11012005><FONT face=Arial size=2>--- testDSig
started for xmlsec-default library (20050111_133044)<BR>---
LD_LIBRARY_PATH=/cygdrive/c/project/batch_nss/install/lib<BR>Test:
/merlin-xmldsig-twenty-three/signature-enveloped-dsa<BR>win32/binaries/xmlsec.exe
verify --crypto-config win32\tmp/xmlsec-crypto-config
./tests/merlin-xmldsig-twenty-three/signature-enveloped-dsa.xml<BR>OK<BR>SignedInfo
References (ok/all): 1/1<BR>Manifests References (ok/all):
0/0<BR>win32/binaries/xmlsec.exe sign --crypto-config
win32\tmp/xmlsec-crypto-config --pkcs12 ./tests/keys/dsakey.p12 --pwd secret
--output win32\tmp/testDSig.20050111_133044-2952.tmp
./tests/merlin-xmldsig-twenty-three/signature-enveloped-dsa.tmpl<BR>func=xmlSecNssAppPkcs12LoadSECItem:file=..\src\nss\app.c:line=940:obj=unknown:subj=SEC_PKCS12DecoderImportBags:error=4:crypto
library function failed: ;last nss error=-8099
(0xFFFFE05D)<BR>func=xmlSecNssAppKeyLoadSECItem:file=..\src\nss\app.c:line=388:obj=unknown:subj=xmlSecNssAppPkcs12LoadSECItem:error=1:xmlsec
library function failed: ;last nss error=-8099
(0xFFFFE05D)<BR>func=xmlSecNssAppKeyLoad:file=..\src\nss\app.c:line=299:obj=unknown:subj=xmlSecNssAppKeyLoadSECItem:error=1:xmlsec
library function failed: ;last nss error=-8099
(0xFFFFE05D)<BR>func=xmlSecAppCryptoSimpleKeysMngrPkcs12KeyLoad:file=..\apps\crypto.c:line=194:obj=unknown:subj=xmlSecCryptoAppKeyLoad:error=1:xmlsec
library function failed:filename=./tests/keys/dsakey.p12;last nss error=-8099
(0xFFFFE05D)<BR>Error: failed to load pkcs12 key from
"./tests/keys/dsakey.p12".<BR>Error: keys manager creation
failed<BR><BR></FONT></DIV>
<DIV><SPAN class=781443912-11012005></SPAN><FONT face=Arial size=2>H<SPAN
class=781443912-11012005>ave you any idea about the problem?</SPAN></FONT></DIV>
<DIV><FONT><SPAN class=781443912-11012005></SPAN><SPAN
class=781443912-11012005></SPAN><FONT face=Arial size=2>H<SPAN
class=781443912-11012005>ow can I use private key from the NSS
keystore?</SPAN></FONT></FONT></DIV>
<DIV><FONT><FONT face=Arial size=2><SPAN
class=781443912-11012005></SPAN></FONT></FONT> </DIV>
<DIV><FONT><FONT face=Arial size=2><SPAN class=781443912-11012005>thanks,
Gabor</SPAN></DIV>
<DIV><BR></DIV></FONT></FONT></SPAN></FONT></BODY></HTML>