QA:Testcase enable system nss

From FedoraProject

Jump to: navigation, search

Description

This test case verifies properly enabling system NSS.


How to test

  1. As root, install nss-sysinit:
    yum install nss-sysinit
  2. The command nss-sysinit has a post install scriplet that invokes /usr/bin/setup-nsssysint.sh on. This scripts edits /etc/pki/nssdb/pkcs11.txt as follows:
    • In the stanza with NSS Internal PKCS #11 Module, change the library= section to the following:
      library=libnsssysinit.so
    • In the same NSS stanza, update the Flags to include moduleDBOnly. For example:
      Flags=internal,moduleDBOnly,critical
  3. The nss-sysinit has a preuninstall install scriplet that invokes /usr/bin/setup-nsssysint.sh off which undoes these changes.
  4. Next, create sl dsb's from the local dbm database. As root run:
    certutil -K -X -d sql:/etc/pki/nssdb

Expected Results

FIXME