This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Certificate Keystores
Certificate Keystores

Version management

Difference between version and

At line 1 added 36 lines
!!!Network Security Services (NSS)
Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support [SSL] v2 and v3, [TLS], PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 [certificates], and other security standards. For detailed information on standards supported, see Overview of NSS.
Most people will end up here trying to utilize the cert/6/7/8/.db and/or key3.db files which are part of the NSS framework.
!! Cert#.db and Key#.db Files
! cert7.db and cert8.db Files
These files hold public certificates of accepted sources.
! key3.db
This file hold private keys and certificates.
[Description of the cert/6/7/8/.db and key3.db files.|http://www.mozilla.org/projects/security/pki/nss/db_formats.html]
! [NSS Security Tools|http://www.mozilla.org/projects/security/pki/nss/tools/]
!! Putting [DER] encoded [Certificate Format] Into NSS DB files
If the application is using cert8.db files, then the [certutil|MozillaCertutil] for the platform you are on should be able to to import the [DER] encoded [Certificate Format] directly in to the certificate store.
! cert7.db
I know of two methods to add a [DER] encoded [Certificate Format] into NSS the ceert7.db store.
First, requires using [OpenSSL] and the certutil (utility from NSS). You would use openSSL to [convert|Converting Certificate Formats] the [DER] encoded [Certificate Format] into a format like [PKCS12] that you can then use the certutil utility to add the certificate to the NSS db files.
Second, do this:
* download and install the [Netscape Browser 4.79|http://browser.netscape.com/downloads/archive/] for your platform.
* Copy over the existing cert7.db and key3.db files with the files in the [attached zip file|http://www.willeke.com:9080/wikildap/attach/CertificateKeystores/emptyCert7andKey3Files.zip].
* Open the [Netscape Browser 4.79|http://browser.netscape.com/downloads/archive/]
* Drop the [[DER] encoded [Certificate Format] certificate on the Browser container.
* Accept the prompts as prompted.
* Copy the cert7.db and key3.db files to where you require them.
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop