>> I am curious as to how smartcard management is supposed to work for Linux. 
>> It seems to me that it would be ideal for Firefox to support the shared DB 
>> on Linux. Are there OS-level tools for managing the shared DB. For example, 
>> is there an OS-level UI for adding/removing PKCS#11 modules in Fedora/RHEL 
>> that would make Firefox's UI for this redundant?
> System level PKCS #11 modules (installed by the administrater) are
> stored in /etc/pki/nssdb, user level pkcs #11 modules (installed by the
> user) are stored in ~/.pki/nssdb . User level application load both the
> system modules and the user modules. Now this works under the covers is
> described here: https://wiki.mozilla.org/NSS_Shared_DB_And_LINUX

OK, it would be helpful if I actually answered the question which was
asked.;).

Currently there is no UI at the OS level for adding and removing PKCS
#11, just some command line apps. The FF/TB UI (if you they were using
the system DB) would add and subract PKCS #11 modules from the user db
(not the system one). Part of the reason for having the userdb to to
allow such UI's to continue to operation.

bob


-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to