I hope it is related. A few months/years ago (no one really cared until i noticed it a few weeks ago [WTF!]), some of our software installations start to fail and corrupt the cert8.db or key9.db on Firefox or Thunderbird.
This is more or less the scenario: Firefox/Thunderbird profile working. I dont know if any CA cert is already present. Should i care? Should i avoid adding any CA certificate twice? wouldnt it be replaced? I add the desired CA certificates using certutil tool Sometimes (5%?), the cert8.db file become corrupt (i havent checked the key9.db yet, but i hope i could do it sooner or later) If i delete it, open firefox/thunderbird (so recreated it) and add the CA certificates again, works. Talking with kaie at #nss, he suggested it could be a concurrency problem, if adding the certs while application is running. But this seems to happen also on not-running firefox/thunderbird environments. I have been reading and looking for some info, and now im playing a bit with berkley db format to understand what can happend. Can this be related? Any idea when v9 will be set as default? (or if it will be ever do?) BTW: this message can be replied to mozilla-dev-tech-cry...@lists.mozilla.org and dev-tech-crypto@lists.mozilla.org Can anyone tell me the difference/link? -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto