Opening Firefox v59 keystore with NSS

Renato Alves <[email protected]> Wed, 24 Jan 2018 16:31:26 +0100

Newsgroups	gmane.comp.mozilla.security
Message-ID	<[email protected]>

Hi everyone,

In the past, libnss could be directly initialized by simply pointing the code to a location containing 'cert8.db' and 'key3.db'.
This is the basis of https://github.com/unode/firefox_decrypt a small tool I authored myself with the help of several contributors.

With Firefox 59 key.db and cert.db were modified to use an SQLite format instead of Berkley DB format.
After this change, direct initialization of NSS is no longer possible (tested with older NSS and the latest 3.35).
The latest NSS reports "SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.". The use of "old" in the error message is a little misleading.

With that said, is there any other way to initialize libnss to be able to decode Firefox's profile credentials or is this feature no longer supported?

Many thanks,
Renato

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

signature.asc (application/pgp-signature, 833 B)