Ram A Moskovitz wrote:

This works:
certutil -M -d ./ -n "a cert in cert8.db" -t w,w,w

Ths fails as designed (as the cert is not in the cert8.db file):
certutil -M -d ./ -n "a cert in P11 module and not in cert8.db" -t w,w,w

This fails but I was hoping it would work:
certutil -M -d ./ -h all -n "a cert in P11 module and not in cert8.db" -t w,w,w


How did you specify "a cert in PK11 module and not in cert8.db". I know at some level NSS will move a cert in a trusted r/w database to modify it (which is how ff moves certs from the built-ins to the base cert8.db).


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to