Difference between revisions of "NSS Tools"

From Dogtag
Jump to: navigation, search
m
m (Replaced content with "This page has been moved to https://github.com/dogtagpki/nss/wiki/NSS-Tools.")
 
Line 1: Line 1:
= Installation =
+
This page has been moved to https://github.com/dogtagpki/nss/wiki/NSS-Tools.
 
 
<pre>
 
$ dnf install nss-tools
 
</pre>
 
 
 
= certutil =
 
 
 
See [https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Tools/certutil certutil].
 
 
 
= modutil =
 
 
 
See [https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/Tools/modutil modutil].
 
 
 
= pk12util =
 
 
 
To export a certificate, its key, and the certificate chain from NSS database into a PKCS #12 file:
 
 
<pre>
 
$ pk12util \
 
-d <NSS database> \
 
-K <NSS password> \
 
-o <PKCS #12 file> \
 
-W <PKCS #12 password> \
 
-n <nickname>
 
</pre>
 
 
 
See also [https://github.com/dogtagpki/pki/wiki/PKI-PKCS12-CLI PKI PKCS12 CLI].
 
 
 
= ssltap =
 
 
 
Start ssltap:
 
 
 
<pre>
 
$ ssltap -sxl $HOSTNAME:8443
 
</pre>
 
 
 
Then use a browser to open port 1924.
 
 
 
= selfserv =
 
 
 
To run an SSL server:
 
 
 
<pre>
 
$ /usr/lib64/nss/unsupported-tools/selfserv -d nssdb -n sslserver -p 8443 -w Secret.123 -V tls1.0:tls1.2
 
</pre>
 
 
 
= tstclnt =
 
 
 
To run an SSL client:
 
 
 
<pre>
 
$ /usr/lib64/nss/unsupported-tools/tstclnt -d nssdb -b -V tls1.0:tls1.2 -C -h $HOSTNAME -p 8443
 
</pre>
 
 
 
= listsuites =
 
 
 
To display cipher suites:
 
 
 
<pre>
 
$ /usr/lib64/nss/unsupported-tools/listsuites
 
</pre>
 
 
 
= References =
 
 
 
* [[SSL]]
 
* [[NSS]]
 

Latest revision as of 20:06, 22 July 2022

This page has been moved to https://github.com/dogtagpki/nss/wiki/NSS-Tools.