<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments for o-regan.org</title>
	<atom:link href="http://o-regan.org/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://o-regan.org</link>
	<description>Codesigning simplified...</description>
	<pubDate>Wed, 23 Jul 2008 19:21:28 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>Comment on Download by William Kent</title>
		<link>http://o-regan.org/xpisigner-secure-your-firefox-extensions/download-xpisigner/#comment-255</link>
		<dc:creator>William Kent</dc:creator>
		<pubDate>Thu, 10 Jul 2008 01:40:53 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?page_id=13#comment-255</guid>
		<description>Updating to "strong" policy files did not resolve the problem, in fact it got worse. Now xpi-signer won't run at all.</description>
		<content:encoded><![CDATA[<p>Updating to &#8220;strong&#8221; policy files did not resolve the problem, in fact it got worse. Now xpi-signer won&#8217;t run at all.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Download by William Kent</title>
		<link>http://o-regan.org/xpisigner-secure-your-firefox-extensions/download-xpisigner/#comment-254</link>
		<dc:creator>William Kent</dc:creator>
		<pubDate>Thu, 10 Jul 2008 00:42:05 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?page_id=13#comment-254</guid>
		<description>Found this but still no further clues as to how to fix...

You do not have the *unlimited strength* local_policy.jar and
US_export_policy.jar files installed.  The ones that come with your JDK
download from Sun are the "strong" policy files, not the "unlimited"
policy files.</description>
		<content:encoded><![CDATA[<p>Found this but still no further clues as to how to fix&#8230;</p>
<p>You do not have the *unlimited strength* local_policy.jar and<br />
US_export_policy.jar files installed.  The ones that come with your JDK<br />
download from Sun are the &#8220;strong&#8221; policy files, not the &#8220;unlimited&#8221;<br />
policy files.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Download by William Kent</title>
		<link>http://o-regan.org/xpisigner-secure-your-firefox-extensions/download-xpisigner/#comment-253</link>
		<dc:creator>William Kent</dc:creator>
		<pubDate>Wed, 09 Jul 2008 22:30:56 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?page_id=13#comment-253</guid>
		<description>Same problem with version 1.6... "illegal key size".</description>
		<content:encoded><![CDATA[<p>Same problem with version 1.6&#8230; &#8220;illegal key size&#8221;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Download by William Kent</title>
		<link>http://o-regan.org/xpisigner-secure-your-firefox-extensions/download-xpisigner/#comment-252</link>
		<dc:creator>William Kent</dc:creator>
		<pubDate>Wed, 09 Jul 2008 21:09:10 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?page_id=13#comment-252</guid>
		<description>Hi Kevin

Back again... and have wee problem. Need to update our plugin and resign. Before updating the plugin I tried running the setup that we had used last time. Nothing has changed on the computer, files are the same and cmd line is the same. But when I ran it on the old setup I am now getting this error...

Starting scan of files...
install.js
        MD5   7408D9595F7F007F8ADC88FF52D2393C
        SHA-1 EFCF4A13C5B26F5B00A7FF359AEE08E57E9233A7

npCopysafe35.dll
        MD5   30E93CA2F2B3D06CDDBBE979D9A7C74F
        SHA-1 ED7AADE897455F2A0F2955FD46AB7342AACE57F7

Saving manifest file...done.
Saving signature file...done.
Loading credential and signing ...exception unwrapping private key - java.securi
ty.InvalidKeyException: Illegal key size

====================================

The only thing that may have changed is Java being updated to 1.6 which apparently has caused a lot of problems for a lot of developers.

So the question is how to fix it? Was using version 1.3. Will version 1.6 resolve the problem?</description>
		<content:encoded><![CDATA[<p>Hi Kevin</p>
<p>Back again&#8230; and have wee problem. Need to update our plugin and resign. Before updating the plugin I tried running the setup that we had used last time. Nothing has changed on the computer, files are the same and cmd line is the same. But when I ran it on the old setup I am now getting this error&#8230;</p>
<p>Starting scan of files&#8230;<br />
install.js<br />
        MD5   7408D9595F7F007F8ADC88FF52D2393C<br />
        SHA-1 EFCF4A13C5B26F5B00A7FF359AEE08E57E9233A7</p>
<p>npCopysafe35.dll<br />
        MD5   30E93CA2F2B3D06CDDBBE979D9A7C74F<br />
        SHA-1 ED7AADE897455F2A0F2955FD46AB7342AACE57F7</p>
<p>Saving manifest file&#8230;done.<br />
Saving signature file&#8230;done.<br />
Loading credential and signing &#8230;exception unwrapping private key - java.securi<br />
ty.InvalidKeyException: Illegal key size</p>
<p>====================================</p>
<p>The only thing that may have changed is Java being updated to 1.6 which apparently has caused a lot of problems for a lot of developers.</p>
<p>So the question is how to fix it? Was using version 1.3. Will version 1.6 resolve the problem?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on InvalidKeyException: Illegal key size issue by kevin</title>
		<link>http://o-regan.org/2007/08/03/invalidkeyexception-illegal-key-size-issue/#comment-250</link>
		<dc:creator>kevin</dc:creator>
		<pubDate>Mon, 26 May 2008 12:40:22 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?p=11#comment-250</guid>
		<description>@Mitchell, Sorry it took so long to get back to you. It looks like your key is not exportable. When importing the key there's usually a checkbox to allow permit the key to re-exported.</description>
		<content:encoded><![CDATA[<p>@Mitchell, Sorry it took so long to get back to you. It looks like your key is not exportable. When importing the key there&#8217;s usually a checkbox to allow permit the key to re-exported.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on InvalidKeyException: Illegal key size issue by Mitchell Klebel</title>
		<link>http://o-regan.org/2007/08/03/invalidkeyexception-illegal-key-size-issue/#comment-224</link>
		<dc:creator>Mitchell Klebel</dc:creator>
		<pubDate>Wed, 07 May 2008 14:54:40 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?p=11#comment-224</guid>
		<description>I can't export to a PFX only .CER (DER,Base-64, and .P7B) Why?</description>
		<content:encoded><![CDATA[<p>I can&#8217;t export to a PFX only .CER (DER,Base-64, and .P7B) Why?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on XPISigner v 1.5 released by Mitchell Klebel</title>
		<link>http://o-regan.org/2007/08/15/xpisigner-v-15-released-2/#comment-223</link>
		<dc:creator>Mitchell Klebel</dc:creator>
		<pubDate>Wed, 07 May 2008 14:30:51 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?p=20#comment-223</guid>
		<description>any info on the IllegalKeySize issue? It's driving me nuts.....</description>
		<content:encoded><![CDATA[<p>any info on the IllegalKeySize issue? It&#8217;s driving me nuts&#8230;..</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on XPISigner v1 by kevin</title>
		<link>http://o-regan.org/xpisigner-secure-your-firefox-extensions/#comment-130</link>
		<dc:creator>kevin</dc:creator>
		<pubDate>Thu, 17 Apr 2008 12:44:25 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?page_id=4#comment-130</guid>
		<description>Hi, Not directly. You need to convert the pvk and associated certificate(s) to PFX/P12 format to use with the tool. (http://msdn2.microsoft.com/en-us/library/aa906334.aspx) 

There's also a tool to convert see &lt;ins datetime="2008-04-17T12:48:01+00:00"&gt;http://www.drh-consultancy.demon.co.uk/pvk.html&lt;/ins&gt;
 
Alternatively if you've imported the key/cert into the windows cert store, you may be able to export it as a PFX/P12 file (that's if you checked the 'allow export' box when you imported it).

(Edited to correct the link to pvktool)</description>
		<content:encoded><![CDATA[<p>Hi, Not directly. You need to convert the pvk and associated certificate(s) to PFX/P12 format to use with the tool. (http://msdn2.microsoft.com/en-us/library/aa906334.aspx) </p>
<p>There&#8217;s also a tool to convert see <ins datetime="2008-04-17T12:48:01+00:00"><a href="http://www.drh-consultancy.demon.co.uk/pvk.html" rel="nofollow">http://www.drh-consultancy.demon.co.uk/pvk.html</a></ins></p>
<p>Alternatively if you&#8217;ve imported the key/cert into the windows cert store, you may be able to export it as a PFX/P12 file (that&#8217;s if you checked the &#8216;allow export&#8217; box when you imported it).</p>
<p>(Edited to correct the link to pvktool)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on XPISigner v1 by cesarpachon</title>
		<link>http://o-regan.org/xpisigner-secure-your-firefox-extensions/#comment-129</link>
		<dc:creator>cesarpachon</dc:creator>
		<pubDate>Thu, 17 Apr 2008 11:33:11 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?page_id=4#comment-129</guid>
		<description>hi, does this tool work with PVK files? I saw one post here which does a indirect reference to a pvk extension..</description>
		<content:encoded><![CDATA[<p>hi, does this tool work with PVK files? I saw one post here which does a indirect reference to a pvk extension..</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on So what happened? by [ Irish KC ] &#187; Kansas City Irish Festivals, Music, Pubs, &#38; Events by an Artist in Ireland &#187; Thank You for the Nice Words</title>
		<link>http://o-regan.org/2008/04/11/so-what-happened/#comment-8</link>
		<dc:creator>[ Irish KC ] &#187; Kansas City Irish Festivals, Music, Pubs, &#38; Events by an Artist in Ireland &#187; Thank You for the Nice Words</dc:creator>
		<pubDate>Fri, 11 Apr 2008 16:24:55 +0000</pubDate>
		<guid isPermaLink="false">http://o-regan.org/?p=21#comment-8</guid>
		<description>[...] since I&#8217;m thanking people, I&#8217;ll thank O-Regan too, for the crack [...]</description>
		<content:encoded><![CDATA[<p>[...] since I&#8217;m thanking people, I&#8217;ll thank O-Regan too, for the crack [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
