https://bz.apache.org/ooo/show_bug.cgi?id=126891

--- Comment #32 from Kay <[email protected]> ---
(In reply to Don Lewis from comment #29)
> I didn't find NSS_USE_SHARED_DB anywhere in the OpenOffice or nss code.
> 
> If I view my certificate in firefox it says:
>   This certificate has been verified for the following uses:
>   SSL Client Certificate
>   Email Signer Certificate
>   Email Recipient Certificate
> 
> The Applying Digital Signatures help page in OpenOffice says:
>   Import your new root certificate, then select and edit the certificate.
>   Enable the root certificate to be trusted at least for web and email
>   access. This ensures that the certificate can sign your documents.
> but I did not see any way of editing the permissions in firefox.

NSS_USE_SHARED_DB is not something that is specific to AOO. In theory, its
supposed to enable finding of certificates among apps that use NSS I believe.
I've enabled it in the past for this.

For our current situation, it seems no matter what I do, my certificate can not
be initialized...

[xmlsecurity] Initializing NSS with profile failed. 

I've always set the NSS_USE_SHARED_DB=enabled in the past along with the
OpenOffice specific export MOZILLA_CERTIFICATE_FOLDER= <some location>
I actually removed MOZILLA_CERTIFICATE_FOLDER for accessing my "local" area and
it seemed that this new version was finding the correct location for my certs
OK in my .mozilla area.

I can only assume at this point that the new cert I got from Comodo ONLY for
email does not pass whatever test is now being used with the new nss version.
However, the same cert is still fine for Digital Signing in 4.1.2. I did a
rebuild today just to be sure.

I see you build --with-system-nss which I do not use. I wonder if this has any
bearing? But, your Windows test was fine. Really I'm at a loss at this point.

Sorry... :(

-- 
You are receiving this mail because:
You are the assignee for the issue.

Reply via email to