NSSDB (cert8.db versus cert9.db) validation

[warron.french]

How do I validate the list of certificates in the cert8.db (legacy NSS dBs) from the cert9.db (modern NSS dBs) files?

I know that I can execute

Code: Select all

certutil   -d/etc/pki/nssdb  -L

but the problem is that I have the following files in this /etc/pki/nssdb directory; so I don't know how to validate I have certificates that are appropriate in both files. I need to be able to validate certificates before I generated and propagate these files inappropriately.

Please help.

[TrevorH]

I don't know either but can't you use an empty directory and copy just one of the files in there and run that?

[warron.french]

I guess that I could, but it sort of defeats the purpose. I don't know what the "powers that be" simply didn't enable the user to specify the file cert8.db or cert9.db in the first place; with that, you then could be certain you had one over the other updated.