OS 5 crypto API

Similar Questions

• Programmatically determine if micro sd card encryption is enabled

  I create the code that needs to require that the micro sd card has encryption enabled on it.

  I so need programmatically determine that it is activated and if it is not my application must then leave.

  (1) is there a way to tell?

  It would be better if there was a way to tell which of the 3 types of encryption is enabled.

  (2) if it is not a way, so is there a way to make sure that the BES has set a strategy which tells the BlackBerry this micro sd card encryption must be activated?

  Thank you

  Unfortunately, there is no mechanism in place today to allow you to determine if the contents of the SD card is encrypted or you can determine if a policy is in place to force encryption of the SD card on the device.

  That said, the encryption on the SD card is intended to ensure the content of the SD card when removed from the unit.  The user would have full access to all content on the SD card and would be able to copy the files from the SD via USB Mass Storage without encryption.

  It is for this reason that we simply put in place encryption in the API itself (JSR-75) rather than expose APIs for what he.  If you consider your content to the need for additional security, I encourage you to encrypt the content yourself based on the Crypto API on the device.

• ACS CSUtil error

  Hello

  I'm trying to run CSUTil as an administrator local (the server is in AD domain) and the foloowing error...

  "Failed to initialize the crypto api.

  Any idea?

  3.3.1.11 ACS

  Win2k3 SP1

  Hello

  The following url, said the same error message. Take a look and see if he can help you solve it:

  1.http://www.cisco.com/en/US/partner/products/sw/secursw/ps2086/products_qanda_item09186a0080094bac.shtml#quest1

  2.http://www.cisco.com/en/US/partner/products/sw/secursw/ps2086/products_user_guide_chapter09186a008007dee6.html

  Rgds,

  AK

• Authentication card smart - authentication certificate user

  I am developing an authentication solution for BlackBerry based on cryptographic SIM cards. I managed to create a pilot smart card reader and a driver of smart card using the RIM Crypto API. The use of these two, I'm able to import a
  certificate stored on the SIM card, enable the authentication of users in two phases that checks the password device and the STEM to the certificate. I can also set up a TLS session using private keys and certificates stored on the card.

  However, when you try to activate the "Authentication certificate" option in the password options panel, I encounter a problem. After selection of the certificate and click on save, the device asks me to enter the password device and the PIN smart card, what I'm doing. Debugging tells me, that the PIN is properly checked with the card. Subsequently, a 'Card access smart' popup appears with information that the 'Options' of RIM application attempts to access the card with the information "the private key will be used to initialize authentication certificate". When I enter PIN code OK, I said: 'failed to initialize authentication certificate. Check that the certificate is not on the smart card used for two-factor authentication. »

  Can someone tell me why this is? Must the certificate be special in some way (content, restriction of the use of the key etc.)? The certificate is obviously present on the map, as there is for example a client certificate for TLS sessions setting. Also, what makes this "initialization" all of the average of certificate?

  Well, I think I'll answer myself that I managed to solve this problem

  After some debugging I realized that:

  • After the second PIN prompt appears, the method of signRSA (net.rim.device.api.crypto.RSACryptoSystem, net.rim.device.api.crypto.CryptoTokenPrivateKeyData, byte [], byte [], int, int, java.lang.Object) in our RSACryptoToken extension is called
  • This method gets a context (last parameter) object, which is a SmartCardSession
  • during the processing of the request of sign (cf. the smart card and examples of smart card of RIM drive) must not create an another smart card session, but instead reuse the provided in the framework.

  Trying to establish a new session of chip due to the demand to block, because the sessions are exclusive, i.e. only can be opened simultaneously.

• SHA1

  Hello

  I try to get the type (php default) sha1 of a string. Here's what I have so far:

  SHA1Digest sha1Digest = new SHA1Digest();
  Sha string = "test string"; This string has been changed for security reasons

  sha1Digest.Update (SHA. GetBytes(), 0, sha.length ());
  Digest of Byte [] = sha1Digest.getDigest ();
  SHA = "";
  for (int a = 0;< digest.length;="">
  {
  SHA += digest [a];
  }
  System.out.println ("sha:" + sha);

  but it brings something like 69785171-7241-731860-91-81-11884-401-11041-56-40-88 for example, an incorrect value

  can you guys help out me? Anyone know what I'm doing wrong? Or maybe someone knows a better way to do this?

  Note: I already have stuff of security using the IDE Edit > preferences > Code Signing > RIM Crypto API (marked true)

  and all the keys have been acquired and installation

  Thanks for your help guys

  I agree with mreed that you use Integer.toHexString (0xFF & digest [a]). Also I suggest you use getBytes otherwise because your use is based on several aspects of default encoding. For example in some encodings .length str.getBytes () is not the same as str.length (). And there may be no appropriate code some non standard symbols. I suggest to use UTF - 8 (or uses the same encoding of your PHP code).

  private void doTest() throws UnsupportedEncodingException
  {
      SHA1Digest sha1Digest = new SHA1Digest();
      String sha = "teststring";
  
      byte[] inpData = sha.getBytes("UTF-8");
      sha1Digest.update(inpData, 0, inpData.length);
      byte[] digest = sha1Digest.getDigest();
      StringBuffer shaRes = new StringBuffer(40); //40 hex char is size of 160-bit SHA-1 result
      for (int a = 0; a < digest.length; a++)
      {
          String tmp = Integer.toHexString(0xff & digest[a]);
          if(tmp.length() == 1) //If hex value is "0X" then tmp is just one digit "X"      {
              shaRes.append('0');
          }
          shaRes.append(tmp);
      }
      System.out.println("shaRes: " + shaRes.toString());
  }
  

  This code gives me the same result as the implementation for the http://jssha.sourceforge.net/

  You can encapsulate byte [] inpData = sha.getBytes("UTF-8"); in try/catch and ignore UnsupportedEncodingException because as far as I KNOW UTF - 8 is supported by all BB devices.

  PS code is updated according to the mreedof fix for '0' in the result.

• Need to encrypt the data as mp4, mp3 in the folder of the SD card

  Hi all

  -I'm a bit confused abt encryption of image, audio, video, files that I will store in a single folder on SD card.

  -I want to encrypt this folder so that no one can consult data except my app.

  -J' searched a lot but I couldn't find the pefect solution but I find something that may be correct.

  -I can't convert the entire file in the array of bytes so I wil convert all the data inside the file to a byte array then using crypto api I'll pass this array of bytes.

  I want the suggestion. This is the right way to encrypt the folder on SD card?

  Thank you...

  Welcome on the support forums.

  You can encrypt the files, there is no such thing as an encypted folder.
  API to encrypt/decrypt the byte [] to a file using the Cryptography is the correct way, Yes.

• JDE 4.7 CAP question?

  I I have a problem with a JDE 4.7 code signing application and it seems that it is apparent to the CAP JDE 4.7 compiler.

  Basically I modified HelloWorld.java that comes with JDE 4.7 examples to add an API call control (see below for more details). Then, I compiled and generated the jad and jar files. After that, I used the following command line to generate the .cso, .csl and .cod files JDE 4.2 and 4.7 JDE environment respectively with exactly the same file jad and jar file:

  CAP import = net_rim_api.jar = HelloWorldSigning = HelloWorldSigning.jad HelloWorldSigning.jar jad codname

  However, I found that HelloWorldSigning.cso generated under 4.7 environment does not have entry "52525400 = RIM Runtime API" in it compared with that generated under environment 4.2. (The HelloWorldSigning.csl files are the same). As a result, the signed HelloWorldSigning.cod less 4.7 will get "attempts to access a secure API" error loading on devices of the storm, then the HelloWorldSigning.cod signed under 4.2 has no problem. If I manually fix the file cso by adding the missing entry under 4.7, it will solve the problem.

  No idea what's wrong with him?

  PS:

  HelloWorldSigning.csl under 4.2 and 4.7 as follows:

  52525400 = RIM API implementation

  HelloWorldSigning.cso less than 4.7:

  33000000 = RIMAPPSA2
  52424200 = RIM Blackberry Apps API
  52434300 = RIM API Crypto - Certicom
  52434900 = RIM Crypto API - internal
  52435200 = RIM API Crypto - RIM

  HelloWorldSigning.cso minus 4.2:

  3000000 = RIMAPPSA2
  52434300 = RIM API Crypto - Certicom
  52434900 = RIM Crypto API - internal
  52435200 = RIM API Crypto - RIM
  52525400 = RIM API implementation
  52424200 = RIM Blackberry Apps API

  Code source HelloWorld.java:
  /**
  *
  * HelloWorld.java
  * The sentinal sample!
  *
  * Copyright © 1998-2008 Research In Motion Ltd.
  *
  * Note: For simplicity, this sample application cannot operate
  * resource bundles and resource strings.  However, it is STRONGLY recommended
  * that make application developers use available location functions
  in the development platform BlackBerry to ensure uniform application
  * experience in a variety of languages and geographies.  For more information
  * on the location of your application, please refer to the BlackBerry Java Development
  * Environment Development Guide associated with this version.
  */

  package com.rim.samples.device.helloworlddemo;

  Import net.rim.device.api.notification.NotificationsConstants;
  Import net.rim.device.api.notification.NotificationsManager;
  Import net.rim.device.api.ui.UiApplication;
  Import net.rim.device.api.ui.container.MainScreen;
  Import net.rim.device.api.ui.Field;
  Import net.rim.device.api.ui.component.Dialog;
  Import net.rim.device.api.ui.component.LabelField;
  Import net.rim.device.api.ui.component.RichTextField;

  /*
  * BlackBerry applications that provide a user interface must extend
  * UiApplication.
  */
  class HelloWorldDemo extends UiApplication
  {
  /**
  * Entry point for application.
  */
  event object public final static = new Object() {}
  public String toString() {}
  return to "sing";
  }
  };
  Public Shared Sub main (String [] args)
  {
  Create a new instance of the application.
  NotificationsManager.registerSource (0x8f8c19257ffbb06fL, event, NotificationsConstants.CASUAL);
  PAP HelloWorldDemo = new HelloWorldDemo();
         
  To apply to enter the event thread and the beginning of message processing,
  We invoke the enterEventDispatcher() method.
  theApp.enterEventDispatcher ();
  }

  /**
  *

  The default constructor. All RIM user interface components creates and runs a push of the
  screen of the application root in the user interface stack.
  */
  HelloWorldDemo() private
  {
  Push the instance main screen user interface for rendering stack.
  pushScreen (new HelloWorldScreen());
  }
  }

  /**
  Create a new screen that covers the screen, which offers default standard
  * BlackBerry applications behavior.
  */
  / * package * final class HelloWorldScreen extends screen
  {

  /**
  * Manufacturer HelloWorldScreen.
  */
  HelloWorldScreen()
  {
  Add a field to the title area of the screen. We use a simple LabelField
  here. the SELECTION option truncates the text of the label with «...» "If the text
  It is too long for the space available.
  LabelField title = new LabelField ("Hello World Demo", LabelField.ELLIPSIS |) LabelField.USE_ALL_WIDTH);
  setTitle (title);

  Add a text field read-only (RichTextField) on the screen.  The RichTextField
  is active by default.  In this case, we provide a style to make the field
  non-focusable.
  Add (new RichTextField ("Hello World!", Field.NON_FOCUSABLE));
  }

  /**
  * Show a dialog box to the user with "Goodbye!" when the application
  * is closed.
  *
  * @see net.rim.device.api.ui.Screen #close)
  */
  public void close()
  {
  Display a farewell message before closing the application.
  Dialog.Alert ("Goodbye!");
  System.Exit (0);
         
  Super.Close ();
  }
  }

  Mark Merci for the quick reply.

  I have added the work around my build script, it seems to works fine.

• Error checking 2745

  When I introduced the code for BlackBerryCanvas and TouchEvent at my request, I started having some error checking 2745. I suspect this is related to my application signature. If Yes, what is the ID of the required signatory, so I can add to my cso file?

  Current content of CSO:

  33000000 = RIMAPPSA2
  52424200 = RIM Blackberry Apps API
  52434300 = RIM API Crypto - Certicom
  52434900 = RIM Crypto API - internal
  52435200 = RIM API Crypto - RIM
  52525400 = RIM API implementation

  Thank you.

  Ah. It turns out that my build script mentioned the JDE 4.5 for the CAP. Thank you.

• RSA - ENC with EPII HW Accelerator

  Hi all

  I need a confirmation on the following points:

  -rsa - enc is not supported by EPII and modules EPII-Plus, and this is a hardware limitation, so they will not support it in the future either.

  -so rsa - enc is made in the software, while all other uses of encryption is done by the "Accelerator" HW module in the router.

  Thank you

  Attila

  Q. what cryptographic modules support the RSA encryption?

  A. here is the three authentication methods currently available within the IKE policy configuration:

  pre_shared key

  RSA - sig (rsa signatures)

  RSA-BA (nuncios rsa encrypted)

  All three modes are supported on the AIM-VPN/BP, EP, HP and MP-VPN/NM.

  Only the pre_shared and the rsa - sig are supported on the AIM-VPN/BPII EPII, HPII and AIM-VPN/BPII-PLUS, EPII-PLUS and HPII-PLUS. These modules do not support rsa-BA because of the incompatibility between Cisco IOS and hardware of chip crypto API. There is a workaround solution listed in the DDT CSCdv30620notes.

  It is available in this FAQ document

  http://www.Cisco.com/en/us/partner/products/HW/routers/PS282/products_qanda_item09186a00800918fc.shtml#wp40766

• OIM 11 g R2PS2 - how to decipher the user password while calling the OIMClient API

  Hello

  I have a client application that connects to OIM 11 g R2PS2. Users connect in the client application to trigger a request for service and the client application will submit applications to the IOM.

  Connection to the end users to the client application using OAM authentication. So I need to find a mechanism to get the end-user password so that I can use the same in the OIMClient API to connect to IOM.

  If I login as XELSYSADM in the client application, is it possible that I can ask the user password and decrypt the same? I tried to use the code below, but I'm getting null pointer exception.

  RS = stmt.executeQuery ("select USR_PASSWORD from USR where upper (USR_LOGIN) ='" + id + "'");

  If (rs! = null & & RS.) Next {}

  String encPwd = rs.getString ("USR_PASSWORD");

  System.out.println ("get the DB password:" + encPwd);

  try {}

  String decryptPwd = String.valueOf (CryptoUtil.getDecryptedPassword (encPwd, null));

  tcCryptoUtil.decrypt (encPwd, "DBSecretKey");

  System.out.println ("decrypted password:" + decryptPwd);

  oimClient.login (id1, decryptPwd.toCharArray ());

  } catch (Exception e) {}

  e.printStackTrace ();

  e return;

  }

  }

  Exception:

  < 13 November 2015 12:29:01 EST > < error > < XELLERATE. ACCOUNTMANAGEMENT > < BEA-000000 > < class/method: tcDefaultDBEncryptionImpl/initKeyStore some problems: {1}

  java.lang.NullPointerException

  at com.thortech.xl.crypto.tcCryptoHelper.loadKeyStore(tcCryptoHelper.java:145)

  at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.initKeyStore(tcDefaultDBEncryptionImpl.java:67)

  at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.getCipher(tcDefaultDBEncryptionImpl.java:99)

  at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.decrypt(tcDefaultDBEncryptionImpl.java:218)

  at com.thortech.xl.crypto.tcCryptoUtil.decrypt(tcCryptoUtil.java:122)

  at com.thortech.xl.crypto.tcCryptoUtil.decrypt(tcCryptoUtil.java:200)

  at oracle.iam.platform.utils.crypto.CryptoUtil.getDecryptedPassword(CryptoUtil.java:132)

  If you want to use the client of the IOM to send the request as long as the logged on user, IE of OAM session, then you might just get the context of the session of the user so the IOM customer queries will be made in this context. There is no need to decrypt the password for the user in this scenario.

  See rest of URL of excellent example illustrating this: Oracle Fusion Middleware security: authentication IOM API without the end user password

• IOM API Exception

  package com.oracle.oim.sample;
  java.awt.List Import;
  
  
  Import Java.util;
  
  import java.util.Date;
  
  import java.util.HashMap;
  
  import java.util.Hashtable;
  
  to import java.util.Iterator;
  
  import java.sql.Connection;
  
  to import java.sql.DriverManager;
  
  import java.sql.PreparedStatement;
  
  import java.sql.ResultSet;
  
  import java.sql.SQLException;
  
  import java.util.ArrayList;
  
  to import java.util.Collection;
  
  import java.sql. *;
  
  
  
  
  
  Import Thor.API.tcResultSet;
  
  Import Thor.API.tcUtilityFactory;
  
  Import Thor.API.Exceptions.tcAPIException;
  Import Thor.API.Operations.tcEmailOperationsIntf;
  
  Import Thor.API.Operations.tcITResourceInstanceOperationsIntf;
  
  Import Thor.API.Operations.tcLookupOperationsIntf;
  
  Import Thor.API.Operations.tcObjectOperationsIntf;
  
  Import Thor.API.Operations.tcProvisioningOperationsIntf;
  
  Import Thor.API.Operations.tcReconciliationOperationsIntf;
  
  Import Thor.API.Operations.tcRequestOperationsIntf;
  
  Import Thor.API.Operations.tcUserOperationsIntf;
  
  
  
  import com.thortech.xl.crypto.tcCryptoUtil;
  
  import com.thortech.xl.crypto.tcSignatureMessage;
  
  import com.thortech.xl.dataaccess.tcClientDataAccessException;
  import com.thortech.xl.dataaccess.tcDataProvider;
  
  import com.thortech.xl.dataobj.util.tcEmailNotificationUtil;
  
  import com.thortech.xl.orb.dataaccess.tcDataAccessException;
  import com.thortech.xl.scheduler.tasks.SchedulerBaseTask;
  import com.thortech.xl.util.config.ConfigurationClient;
  
  
  
  import com.thortech.xl.dataobj.tcDataSet;
  
  import com.thortech.xl.dataobj.util.tcEmailNotificationUtil;
  
  import com.thortech.xl.dataaccess.tcDataBaseClient;
  
  import com.thortech.xl.dataaccess.tcDataProvider;
  import com.thortech.xl.gc.util.oximmodel.Lookup;
  
  import java.util.Vector;
  Import org.apache.log4j.Logger;
  
  public class unlinkUser extends SchedulerBaseTask {}
  private static Logger LOGGER = Logger.getLogger ("Xellerate.WebApp");
  private tcLookupOperationsIntf lookupIntf;
  private tcReconciliationOperationsIntf reconIntf;
  private tcUserOperationsIntf userIntf;
  private tcObjectOperationsIntf objIntf;
  private tcRequestOperationsIntf reqIntf;
  private tcITResourceInstanceOperationsIntf rtIntf;
  private tcProvisioningOperationsIntf provisionIntf;
  private tcDataProvider db;
  
  public void init() {}
  try {}
  Config ConfigurationClient.ComplexSetting = ConfigurationClient.getComplexSettingByPath ("Discovery.CoreServer");
  final Hashtable env = config.getAllSettings ();
  tcUtilityFactory ioUtilityFactory = new tcUtilityFactory (env, "xelsysadm", "privatekey");
  userIntf = (tcUserOperationsIntf) ioUtilityFactory.getUtility ("Thor.API.Operations.tcUserOperationsIntf");
  reconIntf = (tcReconciliationOperationsIntf) ioUtilityFactory.getUtility ("Thor.API.Operations.tcReconciliationOperationsIntf");
  reqIntf = (tcRequestOperationsIntf) ioUtilityFactory.getUtility ("Thor.API.Operations.tcRequestOperationsIntf");
  lookupIntf = (tcLookupOperationsIntf) ioUtilityFactory.getUtility ("Thor.API.Operations.tcLookupOperationsIntf");
  provisionIntf = (tcProvisioningOperationsIntf) ioUtilityFactory.getUtility ("Thor.API.Operations.tcProvisioningOperationsIntf");
  DB = getDataBase();
  
  
  }
  {} catch (tcAPIException e)
  throw new RuntimeException ("Unable to create instance API" +)
  "instance", e);
  }
  catch (System.Exception e)
  {
  System.out.println (e);
  
  }
  
  }
  {} public void execute()
  Boolean returnValue;
  returnValue = unlink ("KIRAN_KHER", "User OID");
  System.out.Print (returnValue);
  
  }
  public boolean unlink (String UserLogin, String ResourceName)
  {
  long objKey = 0;
  long prockey = 0;
  long take = 0;
  try {}
  UserMap HashMap = new HashMap();
  userMap.put ("Users.User ID", UserLogin);
  tcResultSet userSet = userIntf.findAllUsers (userMap);
  Take = userSet.getLongValue ("Users.Key");
  System.out.Print ("key to the user for the connection of the user" + UserLogin + "is" + take);
  
  tcResultSet items = userIntf.getObjects (take);
  int count = objects.getRowCount ();
  If (Count < 1)
  Returns false;
  
  for (int j = 0; j < objects.getRowCount (); j ++) {}
  objects.goToRow (j);
  
  String objName = objects.getStringValue ("Objects.Name");
  If (objName.equalsIgnoreCase ("user OID")) {}
  prockey = Objects.getLongValue ("process Instance.Key");
  System.out.println ("Resource" + objname);
  System.out.println ("process button" + prockey);
  objKey = objects.getLongValue ("Objects.Key");
  System.out.println ("obj." + key objKey);
  }
  }
  }
  
  catch (System.Exception e)
  {
  System.out.println (e);
  }
  if(objKey == 0)
  {
  System.out.Print ("object key is 0");
  Returns false;
  }
  System.out.Print ("obj key" + objKey + "key proc" + prockey + "user key" + take);
  String query = "UPDATE Ouedraogo SET OST_key = (Select ost_key from the ost where obj_key =" + objKey + "and OST_status ="Revoked") WHERE usr_key = ' + take +" and orc_key = "+ prockey;»
  Logger.info (Query);
  System.out.Print ("after query definition');
  
  try {}
  System.out.Print ("in try");
  db.writeStatement (query);
  
  Returns true;
  } catch (tcDataAccessException e) {}
  e.printStackTrace ();
  } catch (tcClientDataAccessException e) {}
  e.printStackTrace ();
  }
  Returns false;
  
  
  }
  Public Shared Sub main (String [] args) {}
  UU unlinkUser = new unlinkUser();
  uu.init ();
  uu. Execute();
  }
  
  
  }
  
  
  _____________________________________________________________________________________________
  
  Refer to the code above. It defines the State of the resource, service to a basic user key, user key and key of the object
  The sql query works fine from the command prompt: sqlplus.
  But when it is run in eclipse: it gives following error in the console:
  
  key to the user for the connection of the user KIRAN_KHER is 4ResourceOID user
  process key21
  obj key21
  obj 21proc key key key 4after 21user request defnin tryException in thread "main" java.lang.NullPointerException
  * to com.oracle.oim.sample.unlinkUser.unlink(unlinkUser.java:175) *.
  * to com.oracle.oim.sample.unlinkUser.execute(unlinkUser.java:124) *.
  * to com.oracle.oim.sample.unlinkUser.main(unlinkUser.java:190) *.

  Just look at your other thread. I gave the prepared sample for use of Statemnt. It will help you get any question.

  But the thing that you're trying to do, how that will work, I'm not sure. Any change of status is not enough. It will be bound.

  You can call APIs to revoke this user if you do then the user will not remove OID.

• Any plans for changes to the API of Extension for Thunderbird?

  I was wondering if there are plans for the adoption of a more friendly/purely JS API extension, similar to the Firefox SDK or WebExtensions in Thunderbird?

  This has been discussed recently in the Mozilla planning mailing list.

  See https://mail.mozilla.org/pipermail/tb-planning/2015-August/thread.html#3949 for the Archives of the thread.

• Geolocation API works with sandboxed iframes or provide an error

  The navigator.geolocation.watchPosition function call does not work with sandboxed iframes where allow-same-origin is not specified (so the iframe counts as a unique and anonymous origin). I assumed that in so doing the iframe in sandbox inherits is not permission to use the geolocation API to the site that contains is a smart decision. Personally, I wish I had a way to create sandboxed iframes that can also use the geolocation API, but I don't understand if that is not implemented. However, a sandbox or an iframe also does not receive an authorization error when using the geolocation API that is completely wrong and makes it really difficult to debug.

  Perhaps, the https://bugzilla.mozilla.org/show_bug.cgi?id=675533 bug is related somehow?

  I think that it is beyond the scope of support. You can file a new bug and see how it goes: https://bugzilla.mozilla.org/

• Will there be a http api to create a new conversation Hello Firefox?

  A new conversation in Firefox Hello so far can be created by clicking on a button as described here:
  https://support.Mozilla.org/en-us/KB/Firefox-Hello-video-and-voice-conversations-online#w_start-a-conversation

  Y at - it already a http api to create a new conversation? If not: are there plans to create a?
  The api should accept a POST request and reply with the url of the newly created conversation.

  found: https://docs.services.mozilla.com/loop/apis.html#post-rooms
  Please note: docs depict v1, but endpoint https://loop.services.mozilla.com is still running to v0

• Is there an API for Firefox search of certificates in the storage of certificates of Firefox?

  I'm trying to find an open source API available to search for a specific certificate issued by an issuer in my storage of certificates. Do you know something that could be useful to me?

  Thanks in advance!

  The db should be cert8.db and it's accessible with a software able to read db. To be sure: profiles - where Firefox stores your bookmarks, passwords and other user data

  These are the Tools https://developer.mozilla.org/en-US/d.../Tools#dbck

  I don't know if there is a api. Try the DND.