LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 08-02-2012, 05:36 PM   #1
breds
LQ Newbie
 
Registered: Jun 2012
Posts: 11

Rep: Reputation: Disabled
RHEL NSS authentication fails in FIPS mode only!


Hi all,

I am using a RHEL 5.4 workstation and have all the necessary certificates stored in NSS (3.12.3.99.3-1.el5_3.2). With FIPS disabled on NSS, pkcs11_inspect and pklogin_finder work great. However, when I enable fips and use the same tools I receive an INVALID_SIGNATURE error when trying to validate the certificates. The certificates I am using are all DoD issued certificates so I know the actual digital signature is correct.

I have run out of ideas and can't understand where this problem is coming from. Any suggestions?

Thanks,


Breds
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
configuring NSS for a "local" OCSP Responder on RHEL 5.4 breds Linux - Software 0 07-03-2012 01:30 PM
Has anyone implemented smartcard authentication via LDAP on RHEL 5.4 using NSS?? breds Linux - Software 0 06-21-2012 05:19 PM
Using pam_pkcs11-0.6.2-11.1 with NSS for certificate mapping to LDAP fails in cert_in breds Linux - Software 1 06-18-2012 08:58 AM
[SOLVED] SFTP fails public key authentication in batch mode chicagovol Linux - Newbie 1 05-26-2011 04:52 PM
How to use openssl fips mode on Linux kevin747 Programming 2 08-27-2010 11:07 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 12:03 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration