Use p11-kit for this purpose:
https://p11-glue.github.io/p11-glue/p11-kit.html
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/593320
Title:
system wide libnssckbi.so does not reflect /etc/ca-certific
[Expired for nss (Ubuntu) because there has been no activity for 60
days.]
** Changed in: nss (Ubuntu)
Status: Incomplete => Expired
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/593320
Title:
The certs listed in libnss are not maintained by the same people as the
certs in ca-certificates, so making libnss use ca-certificates isn't
really an option.
So...why don't you just remove the CA using the application that uses
nss?
For example, in firefox, Edit/Preferences/Advanced/View Certifi
** Visibility changed to: Public
--
system wide libnssckbi.so does not reflect /etc/ca-certificates
https://bugs.launchpad.net/bugs/593320
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubu
