From Fedora Project Wiki

Revision as of 18:45, 3 October 2009 by Emaldonado (talk | contribs) (Created page with 'Part 1: enabling system NSS 1) As root install nss-sysinit nss-sysinit has a post install scriplet that invokes '/usr/bin/setup-nsssysint.sh on" This scripts edits /etc/pki/nss...')
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Part 1: enabling system NSS 1) As root install nss-sysinit nss-sysinit has a post install scriplet that invokes '/usr/bin/setup-nsssysint.sh on" This scripts edits /etc/pki/nssdb/pkcs11.txt as follows

(a) In the stanza with NSS Internal PKCS #11 Module: 

library= is changed to library=libnsssysinit.so

(b) In the same stanza, with NSS= changes the Flags from: 

Flags=internal,critical to Flags=internal,moduleDBOnly,critical

nss-sysinit has a preuninstall install scriplet that invokes "/usr/bin/setup-nsssysint.sh off" which undoes these changes.

2) As root run "certutil -K -X -d sql:/etc/pki/nssdb" (this will create sl dsb's from the local dbm database).