I need to enumerate the certs in my local store, and in my testing, only user 
certs can be enumerated using the get_cert_nicknames api. It also appears to be 
the only exposed api for listing certs in the db. I'm using the ver 0.12 
version of python-nss. 

The function get_cert_nicknames takes a parameter which lists ALL certs, USER 
certs, CA certs, SERVER certs. I have a mix of user and valid CA certs in my 
nssdb, and the only flag that works is "nss.SEC_CERT_NICKNAMES_USER", and does 
indeed return my user certs. 

I'm unable to programmatically discover other certs using this api. 

After reviewing the nss 'C' source code, I noticed a #ifdef surrounding the 
sections that handle the other 3 cases. Is this functional, and if not, is 
there some other mechanism to enumerate the certs?
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to