Andrea Olivato’s Blog

Just a quick reference to spread that it’s recently been possible to manage SSL certificates trought NSS Shared DB.

Management has not been enabled via gui yet, but it is possible to use nss tools to install and manage certs.

On GoogleGoogle code dedicated page there were useful generic instructions for linuxlinux but we (gentooist) got different commands to launch and a different way to install required nss tools. I added our purple way to do everything to google wiki but I’ll explain it better here.

First of all our nss tools are not installed via a different package but through an use flag of nss package. So to install them we need to add to our /etc/portage/package.use the following line

dev-libs/nss utils

Then we can follow google instructions having the watchfulness of putting nss before every command. So for example

certutil -d sql:$HOME/.pki/nssdb -L

becomes

nsscertutil -d sql:$HOME/.pki/nssdb -L

If you need to add pfx (pkcs12) certs you should use nsspk12util like following examples shows

nsspk12util -d sql:$HOME/.pki/nssdb -i