NSS FIPS 140-2 encryption for Glassfish App Server on Windows

Question

We would like to configure Java such that our web service communications will be encrypted in a manner that is FIPS 140-2 compliant.
I see here that Sun has achieved success in compliance testing in conjunction with the NSS libraries from Mozilla:
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2007.htm#814
I found Andrea's excellent blog which took me through steps in setting up the ..\jre\lib\security\java.security file and in setting up the nss.cfg file:
http://blogs.sun.com/andreas/entry/elliptic_curve_cryptography_in_java
However, when I go to the download of Mozilla \ NSS the latest releases only provide the C code tar bundles. The latest release that provided the binaries for Windows was 3.11 and that was for Windows NT.
ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_11_RTM/
I was therefore hoping that someone might have a step-by-step such that I could create these binaries for Windows XP and Windows Vista. Or even better someone might know of a site where I could download them.
Other information: Our installation of Glassfish also has Metro installed.
Thanks for any help or advice.

Answer 1

Again you are a winner!
I found certutil and modutil under C:\Mozilla\nss-3.12.4-with-nspr-4.8\mozilla\dist\WINNT5.1_DBG.OBJ\bin and the -N -d . was exactly what I needed.
I found this blog: http://blogs.sun.com/arnabold/entry/jks_nss_and_glassfish It is a little dated but I need to somehow get Glassfish start-up to recognize my keystore as FIPS.
The error that I am seeing when I attempt to start GlassfishV2.1 from Netbeans is:
CORE5076: Using [Java HotSpot(TM) Client VM, Version 1.6.0_13] from [Sun Microsystems Inc.]
Using MQ RA for Broker lifecycle control
SEC1002: Security Manager is OFF.
java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.sun.enterprise.server.PELaunch.main(PELaunch.java:415)
Caused by: java.lang.ExceptionInInitializerError
at com.sun.enterprise.security.SecurityLifecycle.onInitialization(SecurityLifecycle.java:101)
at com.sun.enterprise.server.ApplicationServer.onInitialization(ApplicationServer.java:262)
at com.sun.enterprise.server.ondemand.OnDemandServer.onInitialization(OnDemandServer.java:103)
at com.sun.enterprise.server.PEMain.run(PEMain.java:399)
at com.sun.enterprise.server.PEMain.main(PEMain.java:336)
... 5 more
Caused by: java.lang.IllegalStateException: java.security.KeyStoreException: FIPS mode: KeyStore must be from provider SunPKCS11-NSS
at com.sun.enterprise.security.SSLUtils.<clinit>(SSLUtils.java:128)
... 10 more
Caused by: java.security.KeyStoreException: FIPS mode: KeyStore must be from provider SunPKCS11-NSS
at com.sun.net.ssl.internal.ssl.KeyManagerFactoryImpl$SunX509.engineInit(KeyManagerFactoryImpl.java:44)
at javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:239)
at com.sun.enterprise.security.SSLUtils.initKeyManagers(SSLUtils.java:320)
at com.sun.enterprise.security.SSLUtils.<clinit>(SSLUtils.java:106)
... 10 more
I am hoping perhaps someone can tell me how to overcome this one, or point me to a blog that would provide instructions.
Thanks again for your help.