NSSDB (cert8.db versus cert9.db) validation

Issues related to applications and software problems
Post Reply
User avatar
warron.french
Posts: 291
Joined: 2014/03/27 20:21:58

NSSDB (cert8.db versus cert9.db) validation

Post by warron.french » 2018/10/10 17:07:15

How do I validate the list of certificates in the cert8.db (legacy NSS dBs) from the cert9.db (modern NSS dBs) files?

I know that I can execute

Code: Select all

certutil   -d/etc/pki/nssdb  -L
but the problem is that I have the following files in this /etc/pki/nssdb directory; so I don't know how to validate I have certificates that are appropriate in both files. I need to be able to validate certificates before I generated and propagate these files inappropriately.

Please help.
\\War

User avatar
TrevorH
Forum Moderator
Posts: 23876
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: NSSDB (cert8.db versus cert9.db) validation

Post by TrevorH » 2018/10/10 20:31:26

I don't know either but can't you use an empty directory and copy just one of the files in there and run that?
CentOS 5 died in March 2017 - migrate NOW!
Full time Geek, part time moderator. Use the FAQ Luke

User avatar
warron.french
Posts: 291
Joined: 2014/03/27 20:21:58

Re: NSSDB (cert8.db versus cert9.db) validation

Post by warron.french » 2018/10/10 20:45:31

I guess that I could, but it sort of defeats the purpose. I don't know what the "powers that be" simply didn't enable the user to specify the file cert8.db or cert9.db in the first place; with that, you then could be certain you had one over the other updated.
\\War

Post Reply