Mark Thacker wrote:
> So, two questions please : > * Is it possible to convert a cert8.db into a cert7.db , or at least > extract what I need out of it?
No program exists to do that, only in the other direction.
> * What version of NSS (and NSPR) is needed to generate cert7.db > formatted files ?
NSS 3.6 or earlier will read/write cert7.db databases.
> Also, indeed older versions of Netscape generate these files as well, > but how do you get the root CA into the browser's list ?
You can load the file as a .DER or .CER file, and the browser will prompt you for trust settings. Most independent CAs will provide you with an HTTP link you can click to add their root CA to your browser.
> * Do you use 'certutil -A' with a copy of an existing cert7.db file,
Yes, that would be one way to do it.
> can you import the root CA from disk if it's in the correct format > (which format? PKCS #12, DER or what?)
DER format. _______________________________________________ mozilla-crypto mailing list [EMAIL PROTECTED] http://mail.mozilla.org/listinfo/mozilla-crypto
