On 04/15/2013 02:34 PM, Matt Yakel wrote:
Hi all, Is the "certutil" a linux tool only? I am needing to deploy
Local Security Certs to our work network (windows).
No, it can be built for pretty much any NSS supported platform. We use
it as part of the NSS tests. However, I know of no one who is
distributing a version of certutil other than on linux.
I am trying to use the FirfoxADM to deploy the local user profile
settings. I need to get our Office Trusted CA in the .cer form into
the (cert8.db, key3.db, secmod.db) files that the Firefox ADM template
references. I am not sure what that is or how to get the tools to
convert them. I found the following links.
http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html
I kinds of understand the syntax of adding the parameter to the
command. But is this a Linux only tool? will it handle "*.cer" files?
I see that I can download the .tar.gz from here, but how do I install it?
http://www.mozilla.org/projects/security/pki/nss/tools/
Unfortunately that page is about a decade old. Your best bet would be to
try to build NSS yourself on Windows:
http://www.mozilla.org/projects/security/pki/nss/nss-3.11.4/nss-3.11.4-build.html
You'l find certutil in mozilla/dist/{platform}.OBJ/bin where {platform}
is something like WIN95_DBG or WINNT_OPT depending on your build
configuration.
NOTE: NSS has recently moved to HG, so there should be newer build
instructions sometime in the future (they may already be available), but
the link above should get you a reasonably up to date version of certutil.
bob
Thanks any help is appreciated.
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
