Open Source PKI Projects

What's New

21 May 2003

JSS 3.4 is now available. This release includes support for RC2/CBC/PKCS5Padding and several bug fixes.

29 January 2003

NSS 3.7.1 is now available. This release includes several bug fixes.

31 December 2002

JSS 3.3 is now available. This release provides more support for algorithms in the Java Cryptography Architecture (JCA) and Java Cryptography Extension (JCE). It also has a new implementation of SecretDecoderRing and supports the AES algorithm.

20 December 2002

NSS 3.7 is now available. This release uses a new version of the NSS certificate database that supports large CRLs and multiple email addresses for the subject of a certificate.

4 December 2002

NSS 3.6.1 is now available. This release includes several bug fixes.

18 October 2002

NSS 3.6 is now available. This release includes several performance enhancements in certificate lookup and listing, certificate verification, CRL handling, ASN.1 DER decoding, and SSL. It also has a new PKCS #11 session logging facility.

14 August 2002

JSS 3.2 is now available. This release contains a JCA provider that supports algorithms in the Java Cryptography Architecture (JCA) and Java Cryptography Extension (JCE).

1 July 2002

NSS 3.5 is now available. This release is an interim release created for Mozilla 1.0.1 and Netscape 7.

10 June 2002

NSS 3.4.2 is now available. This release includes several bug fixes.

6 May 2002

NSS 3.4.1 is now available. This release includes several bug fixes.

6 May 2002

NSS 3.4 is now available. This release has several new SSL functions, a new SSL server session cache implementation, and six new AES TLS ciphersuites. It also contains a partial implementation of the NSS 4.0 (code name Stan) functions.

12 December 2001

NSS 3.3.2 is now available. This release includes several bug fixes.

12 November 2001

JSS 3.1.1 is now available. This release includes several bug fixes.

9 November 2001

NSS 3.3.1 is now available. This release includes several bug fixes.

26 July 2001

NSS 3.3 is now available. This release enables JSS (3.1 or newer) to use NSS shared libraries and implements five new DHE cipher suites for SSL/TLS on the client side (courtesy of Dr. Stephen Henson).

6 April 2001

NSS 3.2.1 is now available. This release includes improved SSL performance, bug fixes, and simplified build instructions.

12 March 2001

JSS 3.0, the first public release of a Java interface for NSS 3.2, is now available.

2 March 2001

Binary distributions for NSS 3.2 are available, including NSS shared libraries and NSS tools. Binaries for 10 platforms have been tested and certified on 16 OS releases.
NSS 3.3 Plan is available. The main goal of NSS 3.3 is to enable JSS to use NSS shared libraries.

archived news.

Projects

Open source PKI projects include:

Network Security Services (NSS): Libraries designed to support cross-platform development of security-enabled applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. Netscape and Sun use NSS to support these standards in a wide range of products, including iPlanet Certificate Management System, Netscape Certificate Management System, iPlanet Web Server, Netscape Enterprise Server, iPlanet Directory Server, Netscape Directory Server, iPlanet Messaging Server, and Netscape Messaging Server. NSS also provides the security foundation for Netscape Communicator.
Network Security Services for Java (JSS): A Java interface to NSS that supports most of the security standards and encryption technologies supported by NSS. JSS also provides a pure Java interface for ASN.1 types and BER/DER encoding.
Personal Security Manager (PSM): Libraries and a daemon designed to support cross-platform development of security-enabled client applications. Built on top of NSS, these libraries are currently being used by Netscape for ongoing development of a security module for use with Netscape Communicator 4.7.
PKCS #11 Conformance Testing: Test suites designed to test PKCS #11 implementations.

Download Information

Mozilla CVS Information for NSS. NSS files within the Mozilla CVS tree.
Download PKI source. Source code tarballs for PKI projects.
Netscape Personal Security Manager. Netscape Personal Security Manager binaries for use with Netscape Communicator 4.7 and later versions.
Netscape Personal Security Manager for Mozilla. Netscape Personal Security Manager 1.3 binaries for use with Mozilla M17 and later releases.

Open Source PKI Goals

Improve the quality, scalability, and feature set of security code used to create PKI products.
Encourage the development and deployment of PKI-enabled applications and services throughout the industry, including support for PKI features in more open source applications.
Improve confidence in security software by encouraging open review of source code.
Accelerate the growth of a standards-based security foundation for ecommerce and the Internet.

News & Information

Press releases and other sources of information:

To participate in ongoing technical discussions related to NSS and PSM, tune in to the IRC channel #mozcrypto on the server irc.mozilla.org.

Newsgroup: mozilla.dev.tech.crypto