On Tue, Sep 23, 2008 at 11:35 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > David B Hinz wrote: >> In the Java code the JSS (or libjss.so) code is apparently holding on to >> the certificates when it first reads them. When the certs are changed >> in the /home/user/.ldapcerts/key3.db and /home/user/.ldapcerts/cert7.db >> they are not re-read so the user cannot be re-authenticated. > > cert7 ?? Is that a typo? > > Any version of NSS/JSS that uses cert7 is at least 10 years old. > NSS hasn't used cert7 for over 10 years.
cert7.db isn't that old. The switchover to cert8.db occurred in NSS 3.7, which was released in December 2002: http://www-archive.mozilla.org/projects/security/pki/nss/nss-3.7/nss-3.7-release-notes.html But it's still very old. Wan-Teh _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
