[PATCH] 683 Added PKCS #12 attribute to store certificate trust flags.
A new PKCS #12 attribute has been defined to store NSS certificate trust flags in PKCS #12 file. The PKCS12Util has been modified to store the trust flags during export and reset the trust flags in NSS database during import. https://fedorahosted.org/pki/ticket/1742 -- Endi S. Dewata
On 2/15/2016 5:35 PM, Endi Sukma Dewata wrote:
A new PKCS #12 attribute has been defined to store NSS certificate trust flags in PKCS #12 file. The PKCS12Util has been modified to store the trust flags during export and reset the trust flags in NSS database during import.
New patch attached. It adds --no-trust-flags to optionally not include the trust flags during import/export operation as shown in this page: http://pki.fedoraproject.org/wiki/PKI_PKCS12_CLI The code has been tested to work with and without the trust flags. -- Endi S. Dewata
On 2/16/2016 10:25 PM, Endi Sukma Dewata wrote:
On 2/15/2016 5:35 PM, Endi Sukma Dewata wrote:
A new PKCS #12 attribute has been defined to store NSS certificate trust flags in PKCS #12 file. The PKCS12Util has been modified to store the trust flags during export and reset the trust flags in NSS database during import.
New patch attached. It adds --no-trust-flags to optionally not include the trust flags during import/export operation as shown in this page:
http://pki.fedoraproject.org/wiki/PKI_PKCS12_CLI
The code has been tested to work with and without the trust flags.
ACKed by jmagne (thanks!). Pushed to master. -- Endi S. Dewata
participants (1)
-
Endi Sukma Dewata