Re: Opening Firefox v59 keystore with NSS

Renato Alves <[email protected]> Thu, 25 Jan 2018 21:36:49 +0100
Newsgroups gmane.comp.mozilla.security
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============5867282667967341293==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="H9SdSRIgXiAWRI2pfwBOL2mLGPGiKhLaO"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--H9SdSRIgXiAWRI2pfwBOL2mLGPGiKhLaO
From: Renato Alves <[email protected]>
To: Hubert Kario <[email protected]>
Cc: [email protected]
Message-ID: <[email protected]>
Subject: Re: Opening Firefox v59 keystore with NSS
References: <[email protected]>
 <[email protected]>
 <[email protected]>
 <[email protected]>
In-Reply-To: <[email protected]>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 25/01/18 20:58, Hubert Kario wrote:
> I thought that you were using it as DBM database, without help of NSS.
> If you use nss library, specifying the path to the folder with databse =
with=20
> "sql:" as a prefix should be enough.
>=20
> With certutil it looks like this:
>=20
> certutil -L -d sql:/home/user/.pki/nssdb

Thanks, this worked wonderfully [1]. It's even backwards compatible.

[1] https://github.com/unode/firefox_decrypt/commit/089e1df285bc6619c2ace=
bcedacba76070286981#diff-1414aa7f803aa0fc1f720d9ebf9dbb86R343

Couldn't ask for anything smaller than that :)

Cheers and thanks again,
Renato


--H9SdSRIgXiAWRI2pfwBOL2mLGPGiKhLaO
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=x8pf
-----END PGP SIGNATURE-----

--H9SdSRIgXiAWRI2pfwBOL2mLGPGiKhLaO--

--===============5867282667967341293==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

--===============5867282667967341293==--