Roland,

Roland Krikava wrote:
Could someone please tell me how to list the certificates in a cert8.db file
using certutil?  I have tried this using the latest NSS toolset (nss 3.9).
Doing the following will produce nothing:

certutil -L -d "location of cert8.db"

That's probably because your database contains no certs.

Using the same toolset with cert7.db files, does work however.

Then your cert7 database must contain certs.

My goal is to extract Mozilla's default CA Root certificates.

Since NSS 3.1, the root CAs live in a separate PKCS#11 module, not in the cert database. The root CAs will only get copied to the cert DB if their trust is modified. To list the certs in all PKCS#11 modules, add the "-h all" argument to certutil .
_______________________________________________
mozilla-crypto mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to