[PATCH] 354 Fixed client-cert-import command.
Previously client-cert-import uses a JSS method that calls NSS function PK11_ImportDERCertForKey(). To import certificate without key it should use PK11_ImportCert but it's only available via certutil. So for now the client-cert-import has been modified to call certutil until the interface is added to JSS. The MainCLI has been modified not to call CryptoManager.initialize() to avoid locking up the security database while importing the certificate using certutil. -- Endi S. Dewata
On 11/18/2013 10:35 AM, Endi Sukma Dewata wrote:
Previously client-cert-import uses a JSS method that calls NSS function PK11_ImportDERCertForKey(). To import certificate without key it should use PK11_ImportCert but it's only available via certutil. So for now the client-cert-import has been modified to call certutil until the interface is added to JSS.
The MainCLI has been modified not to call CryptoManager.initialize() to avoid locking up the security database while importing the certificate using certutil.
ACKed by Ade. Pushed to master. -- Endi S. Dewata
participants (1)
-
Endi Sukma Dewata