On 5/12/05, Bob Relyea <[EMAIL PROTECTED]> wrote: > Ram A Moskovitz wrote: > > >This works: > >certutil -M -d ./ -n "a cert in cert8.db" -t w,w,w > > > >Ths fails as designed (as the cert is not in the cert8.db file): > >certutil -M -d ./ -n "a cert in P11 module and not in cert8.db" -t w,w,w > > > >This fails but I was hoping it would work: > >certutil -M -d ./ -h all -n "a cert in P11 module and not in cert8.db" -t > >w,w,w > > > > > How did you specify "a cert in PK11 module and not in cert8.db". I know > at some level NSS will move a cert in a trusted r/w database to modify > it (which is how ff moves certs from the built-ins to the base cert8.db).
For "a cert in P11 module and not in cert8.db" I used "-L -h all" to get the name. For "a cert in cert8.db" I edited a cert's trust settings using the FF UI and then used "-L" to find the name to specify as the target for trust change. _______________________________________________ mozilla-crypto mailing list [email protected] http://mail.mozilla.org/listinfo/mozilla-crypto
