Hi All,<br><br>I am having some trouble getting mod_nss in fips mode to work with my hardware pkcs#11 token.<br><br>I actually think I am having more of a nss.conf issue than anything between nss and my token. Private key and certificate fulfillment/import from my CA seem to be just fine.<br>
<br>What is the best way to go about getting a little help? What information (config, logs, ssltap output, etc.) should I provide?<br><br>Also, I am currently using the NSS components that shipped with Red Hat 5 (although I must admit I using CentOS right now - I hope that doesn't affect the likelihood of receiving a response).<br>
<br><span style="font-family: courier new,monospace;">[cglidden@el55-apache-nssmod ~]$ sudo yum info nss nss-tools mod_nss nspr httpd | grep -C2 Version</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Name : httpd</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Arch : i386</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Version : 2.2.3</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Release : 43.el5.centos</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Size : 3.1 M</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">--</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Name : mod_nss</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Arch : i386</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Version : 1.0.3</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Release : 8.el5</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Size : 197 k</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">--</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Name : nspr</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Arch : i386</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Version : 4.7.6</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Release : 1.el5_4</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Size : 245 k</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">--</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Name : nss</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Arch : i386</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Version : 3.12.3.99.3</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Release : 1.el5.centos.2</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Size : 2.6 M</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">--</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Name : nss-tools</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Arch : i386</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Version : 3.12.3.99.3</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Release : 1.el5.centos.2</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Size : 2.9 M</span><br><br>Are there any known issues with these version that I should avoid right away? I am using these versions because my customer has indicated a preference. If I have a good argument for it, we'll upgrade to better versions.<br>
<br>Thanks,<br><br>Chris<br><br>--<br>~~~~~~~~~~~~~~~~~~<br> Christopher Glidden<br> <a href="mailto:cglidden@gmail.com">cglidden@gmail.com</a><br>~~~~~~~~~~~~~~~~~~<br>