Re: a cert write into database has no nickname

On Wednesday 26 August 2015 10:33:21 Kelly wrote:
> Dear Hubert,
>                   I use pk12util to write a p12 cert into nssdb, and reply
> ok. the p12 cert is include two certificates and private key, when i wrote,
> i use "pk12util -i   p12file   -n nickname   -d sql:./nssdb/" it reply ok.
>             when i use "certutil -L -d sql:./nssdb/" to list all cert, it
> display two certs one has default nickname, but another is "(NULL)", and
> the "(NULL)" cert can not be delete by "certutil  -D -n (NULL)  -d
> sql:./nssdb/", could you tell me why? thank you!

could you give me the exact command you used to create the PKCS#12 file?
(or the pkcs12 file itself if you used a test cartificate)

Since () are shell characters, I'm assuming you actually did run
certutil -D -n '(NULL)' -d sql:./nssdb/
-- 
Regards,
Hubert Kario
Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=iZIb
-----END PGP SIGNATURE-----