Add OQS to libnss (enabling loading quantum safe certificate into Chromium) #92

tylerleblond · 2021-07-09T17:12:04Z

Hello,

I am currently trying to use the quantum-safe Chromium (0.5.0) build as a client to connect to the OQS haproxy container using its default certificate generation settings (the default signature algorithm used is dilithium3 according to this page: https://github.com/open-quantum-safe/oqs-demos/tree/main/haproxy). I tried to load the CA certificate from the haproxy container into Chromium but got the following error:

I have verified that I am able to use Curl with this certificate for authentication to access the haproxy, so it is not an issue with the certificate.

It appears that I obtain this error when I try to install certificates that use quantum-safe digital signature algorithms. For example, making use of the OQS fork of OpenSSL contained within the Curl container, I run the following command with <SIG_ALGO> = dilithium2, dilithium3, RSA, and falcon512:

docker run -v pwd:/opt/tmp -it openquantumsafe/curl openssl req -x509 -new -newkey <SIG_ALGO> -keyout /opt/tmp/CA.key -out /opt/tmp/CA.crt -nodes -subj "/CN=oqstest CA" -days 365

The certificates that used dilithium2, dilithium3, and falcon512 failed to load, but the certificate that used RSA loaded just fine.

Any help is appreciated!

Here is the certificate that I grabbed from within the haproxy container:

The text was updated successfully, but these errors were encountered:

taylormadehdz · 2021-07-09T18:53:18Z

@baentsch do you have any guidance on this?

baentsch · 2021-07-10T08:37:29Z

When running oqs-Chrome from a terminal, this error message is emitted when loading the cert above:

[1949:1949:0710/102038.438671:ERROR:nsNSSCertificateDB.cpp(89)] PK11_ImportCert failed with error -8168

This in turn to me means that Chromium uses (NSS') PKCS#11 API (store?) for maintaining certificates -- and I'm not aware of anyone who has begun to OQS-enable NSS, so a rejection of an OQS-cert seems logical. @xvzcf, @dstebila, @jschanck : Does either of you know more about NSS (an OQS-enablement thereof)? Do we know anyone at Mozilla who might be interested in this? And if NSS P11 is not the problem (to be determined), does anyone know what's implementing that API for Chromium?

@tylerleblond @taylormadehdz : Can you share what's your use case for this? We always only intended Chromium to be a demonstration, not a full-feature OQS browser integration -- but if there is serious interest, someone might look into it.

baentsch · 2021-07-10T10:21:51Z

And if NSS P11 is not the problem (to be determined), does anyone know what's implementing that API for Chromium?

Answering my own question: Looks like it's really libnss(3) (failing to) provide that functionality.

So, indeed, it seems OQS-cert import won't work in Chromium until (lib)NSS is OQS-enabled. Nothing oqs-demos/chromium can do about (short of creating a new project: Volunteers welcome :)

taylormadehdz · 2021-07-12T20:10:24Z

Would there be a way to use a different lib for maintaining certificates?

Our use case is to migrate a chat app on one system to make it quantum safe for prototyping activities. @baentsch ... any other ideas for workarounds?

baentsch · 2021-07-13T10:42:56Z

Would there be a way to use a different lib for maintaining certificates?

(OQS-)OpenSSL handles QSC certs just fine -- but then again, chromium doesn't use OSSL by default for all I know -- although there seem to be historical traces of chromium being able to utilize OpenSSL...

Our use case is to migrate a chat app on one system to make it quantum safe for prototyping activities. @baentsch ... any other ideas for workarounds?

Loads -- but I'm constrained by not knowing whether you're free to chose the chat app to QSC-enable. If that were possible, why not look for one using openssl as transport? Next idea: Why not completely do away with application-integrated (QSC-)confidentiality and use (oqs-)SSH instead (obviously only works with a-priori known chat partners)? Third, if for some reason you are bound to chromium, changing the cert-storage to one based on OSSL may be an option -- but that may be convoluted: I never checked all chromium cert-interaction points in that regard. But then again, I don't understand why chromium uses PKCS#11 for server cert storage to begin with: Normally, one would only use that for client certs... Simple file-storage (with a validation layer) might have been sufficient....

taylormadehdz · 2021-07-13T16:43:53Z

Okay we're pretty set on using Chromium... Here is the sitch:

Quantum safe Chromium can connect to OQS test server using the quantum safe cert
Quantum safe HA proxy can connect to OQS test server with curl
want to connect HA proxy & chromium, chromium not accept

Would we be able to use the private server cert that Chromium does recognize when connecting to OQS test server on HA Proxy? I.e., is there a way for us to download that from y'all directly to upload to our HA proxy?

About cert-interaction points:

Alternatively when you said changing cert-interaction points, that would require us to build Chromium from scratch (following directions on repo), Correct? We have been using the binary

baentsch · 2021-07-13T17:02:27Z

Would we be able to use the private server cert that Chromium does recognize when connecting to OQS test server on HA Proxy? I.e., is there a way for us to download that from y'all directly to upload to our HA proxy?

I'm not sure I understand: The CA cert at the OQS test server is plain, boring classic crypto: You can create such cert (incl. private key) yourself (and subsequently import to HAproxy, Chromium, whatever). Also, you can create CA-signed private server certs (of any kind, incl. QSC) also yourself (e.g., using the oqs-curl docker image): Why would you thus need "our" server certs?

that would require us to build Chromium from scratch (following directions on repo), Correct?

Yes (after mod'ing the source suitably). Just takes a day -- or a good many-core machine :-)

taylormadehdz · 2021-07-13T17:21:24Z

On it :)

baentsch · 2021-07-31T05:27:40Z

@taylormadehdz : Any news on the above? I'd further suggest changing the title to "Add OQS to libnss" (tagged as future-work, help-wanted)

baentsch · 2022-04-13T07:09:57Z

Like #52 this issue is due to Chromium not using openssl but libnss for certificate management. Until there is wider or libnssupstream interest in this feature (any inside insight about this, @jschanck ?) close this issue pointing to oqs-epiphany if someone wants to use QSC certificates with a browser.

takao8 · 2023-03-09T16:24:08Z

Hello, I just wanted to reopen this issue since @taylormadehdz and I have plans to try and adjust NSS to accommodate for PQC certificates on Chromium. @baentsch, since last year have you heard of any developments to updates libnss for this feature? We've done some basic exploration of the libnss codebase, but I wanted to check with you to see if anybody has gotten anywhere so we don't replicate other efforts.

baentsch · 2023-03-09T17:15:50Z

No, I'm not aware of activities to add OQS code to libnss (but would be glad to see that happen --if only for selfish reasons of not having to add another column to the IETF PQ cert hackathon interop test matrix :). And obviously I much less know whether anyone is adding any (other) PQ cert code to libnss. In sum, by all means, let's reopen this. Thanks, @takao8 @taylormadehdz to suggest this.

xvzcf · 2023-03-09T17:54:18Z

For OQS in NSS, I'm aware of this.

baentsch · 2023-03-10T06:14:24Z

For OQS in NSS, I'm aware of this.

Thanks for the information, @xvzcf ! I'm not entirely sure how to read this: Is this an integration of the OQS APIs (that would enable PQ certs, too) or rather a Cloudflare-specific code integration supporting their x25519_kyber768 KEM (only)?

If the latter, it doesn't help this issue. If the former, would it be helpful/possible for @takao8 @taylormadehdz to contribute there to move things forward more quickly?

xvzcf · 2023-03-10T15:24:21Z

The PR indeed does not involve liboqs, but Robert Relyea in that comment stated that he's currently working on liboqs integration, which will give us all the NIST kyber variants [...] as well as the PQ signing algorithms, so it might be worthwhile contacting him.

baentsch · 2023-03-11T06:09:13Z

so it might be worthwhile contacting him

Absolutely. Do you know him/could touch base with him? Or do you know his github handle we could post here to get his input to this discussion?

xvzcf · 2023-03-26T02:12:51Z

Absolutely. Do you know him/could touch base with him? Or do you know his github handle we could post here to get his input to this discussion?

I emailed him.

Raytonne · 2023-07-01T04:26:44Z

Since Chromium is using its own root store, you may try to hard code your root CA into the Chromium source code

baentsch · 2023-07-01T06:06:15Z

Since Chromium is using its own root store, you may try to hard code your root CA into the Chromium source code

Thanks for the pointer. How would this solve the issue of quantum safe server certificates/chains not being verifiable in Chromium, though? Isn't libnss still providing the code for this logic? If this code is not PQ-enabled, shouldn't verification fail right away -- before even hitting the root cert?

Raytonne · 2023-07-01T07:35:35Z

Thanks for the pointer. How would this solve the issue of quantum safe server certificates/chains not being verifiable in Chromium, though? Isn't libnss still providing the code for this logic? If this code is not PQ-enabled, shouldn't verification fail right away -- before even hitting the root cert?

The webpage I linked above explicitly mentions

Historically, Chrome integrated certificate verification processes with
the platform on which it was running. This resulted in inconsistent user
experiences across platforms, while also making it difficult for
developers to understand Chrome's expected behavior. ... Once complete,
the launch of the Chrome Certificate Verifier will ensure users have a
consistent experience across platforms, that developers have a
consistent understanding of Chrome‘s behavior, and that Chrome better
protects the security and privacy of users’ connections to websites.

So I think if the root certificate is in Chrome Root Store, then libnss is not providing the code for this logic; instead, the Chrome Certificate Verifier will build and verify the certificate chain.

In PR #210 , we provided a way to make Chrome Certificate Verifier able to verify quantum safe server certificates/chains.

Raytonne · 2023-10-11T05:37:55Z

@xvzcf @baentsch Should we close this issue since Chrome is using Chrome Certificate Verifier and Chrome Root Store now? Especially Chrome dropped libnss chromium/chromium@9942b74

nickforsythbarr · 2024-04-30T01:03:51Z

is there a new issue recently with acceptance of CA certs in Chrome 124.0.6367.91
Im getting the error: [29771:29771:0429/142921.004838:ERROR:nsNSSCertificateDB.cpp(95)] PK11_ImportCert failed with error -8168

Raytonne · 2024-05-16T20:00:53Z

is there a new issue recently with acceptance of CA certs in Chrome 124.0.6367.91 Im getting the error: [29771:29771:0429/142921.004838:ERROR:nsNSSCertificateDB.cpp(95)] PK11_ImportCert failed with error -8168

Are you importing a CA that uses quantum-safe algorithms? If yes, then this is expected.

nickforsythbarr · 2024-05-23T01:46:41Z

For those seeking a fix who find their way here. This appears to work allowing Chrome, and VsCode etc to respect the CA:
(Ubuntu 24.04, Chrome 125.0.6422.76, Code 1.89.1)

# sudo chmod -R 766 /home/username/.pki/
# certutil -d sql:$HOME/.pki/nssdb -A -t "CT,c,c" -n "CertName" -i /usr/share/ca-certificates/your_ca.crt

Raytonne · 2024-05-29T02:12:32Z

# sudo chmod -R 766 /home/username/.pki/ # certutil -d sql:$HOME/.pki/nssdb -A -t "CT,c,c" -n "CertName" -i /usr/share/ca-certificates/your_ca.crt

Thank you for the update! Could you update oqs-demos/blob/main/chromium/USAGE.md and create a PR?

baentsch changed the title ~~Error loading quantum safe certificate into Chromium~~ Add OQS to libnss (enabling loading quantum safe certificate into Chromium) Aug 7, 2021

baentsch added future work This issue is something that may or may not be dealt with help wanted Asking for support from non-core team labels Aug 7, 2021

Raytonne mentioned this issue Dec 31, 2021

Issue With OQS-Chromium #111

Closed

baentsch closed this as completed Apr 13, 2022

baentsch mentioned this issue Apr 27, 2022

Unable to Import a Post Quantum Certificate in PQ Chromium #142

Closed

baentsch mentioned this issue Jun 7, 2022

Can't access HTTPD docker web page from PQChromium #144

Closed

baentsch reopened this Mar 9, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add OQS to libnss (enabling loading quantum safe certificate into Chromium) #92

Add OQS to libnss (enabling loading quantum safe certificate into Chromium) #92

tylerleblond commented Jul 9, 2021

taylormadehdz commented Jul 9, 2021

baentsch commented Jul 10, 2021 •

edited

baentsch commented Jul 10, 2021

taylormadehdz commented Jul 12, 2021

baentsch commented Jul 13, 2021

taylormadehdz commented Jul 13, 2021 •

edited

baentsch commented Jul 13, 2021

taylormadehdz commented Jul 13, 2021

baentsch commented Jul 31, 2021

baentsch commented Apr 13, 2022

takao8 commented Mar 9, 2023

baentsch commented Mar 9, 2023

xvzcf commented Mar 9, 2023

baentsch commented Mar 10, 2023

xvzcf commented Mar 10, 2023

baentsch commented Mar 11, 2023

xvzcf commented Mar 26, 2023

Raytonne commented Jul 1, 2023

baentsch commented Jul 1, 2023

Raytonne commented Jul 1, 2023 •

edited

Raytonne commented Oct 11, 2023 •

edited

nickforsythbarr commented Apr 30, 2024

Raytonne commented May 16, 2024

nickforsythbarr commented May 23, 2024 •

edited

Raytonne commented May 29, 2024

Add OQS to libnss (enabling loading quantum safe certificate into Chromium) #92

Add OQS to libnss (enabling loading quantum safe certificate into Chromium) #92

Comments

tylerleblond commented Jul 9, 2021

taylormadehdz commented Jul 9, 2021

baentsch commented Jul 10, 2021 • edited

baentsch commented Jul 10, 2021

taylormadehdz commented Jul 12, 2021

baentsch commented Jul 13, 2021

taylormadehdz commented Jul 13, 2021 • edited

baentsch commented Jul 13, 2021

taylormadehdz commented Jul 13, 2021

baentsch commented Jul 31, 2021

baentsch commented Apr 13, 2022

takao8 commented Mar 9, 2023

baentsch commented Mar 9, 2023

xvzcf commented Mar 9, 2023

baentsch commented Mar 10, 2023

xvzcf commented Mar 10, 2023

baentsch commented Mar 11, 2023

xvzcf commented Mar 26, 2023

Raytonne commented Jul 1, 2023

baentsch commented Jul 1, 2023

Raytonne commented Jul 1, 2023 • edited

Raytonne commented Oct 11, 2023 • edited

nickforsythbarr commented Apr 30, 2024

Raytonne commented May 16, 2024

nickforsythbarr commented May 23, 2024 • edited

Raytonne commented May 29, 2024

baentsch commented Jul 10, 2021 •

edited

taylormadehdz commented Jul 13, 2021 •

edited

Raytonne commented Jul 1, 2023 •

edited

Raytonne commented Oct 11, 2023 •

edited

nickforsythbarr commented May 23, 2024 •

edited