I hope it is related.

A few months/years ago (no one really cared until i noticed it a few
weeks ago [WTF!]), some of our software installations start to fail
and corrupt the cert8.db or key9.db on Firefox or Thunderbird.

This is more or less the scenario:
Firefox/Thunderbird profile working. I dont know if any CA cert is
already present. Should i care? Should i avoid adding any CA
certificate twice? wouldnt it be replaced?
I add the desired CA certificates using certutil tool

Sometimes (5%?), the cert8.db file become corrupt (i havent checked
the key9.db yet, but i hope i could do it sooner or later)
If i delete it, open firefox/thunderbird (so recreated it) and add the
CA certificates again, works.

Talking with kaie at #nss, he suggested it could be a concurrency
problem, if adding the certs while application is running. But this
seems to happen also on not-running firefox/thunderbird environments.

I have been reading and looking for some info, and now im playing a
bit with berkley db format to understand what can happend.
Can this be related?
Any idea when v9 will be set as default? (or if it will be ever do?)


BTW: this message can be replied to
mozilla-dev-tech-cry...@lists.mozilla.org and
dev-tech-crypto@lists.mozilla.org
Can anyone tell me the difference/link?
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to