Re: how to make firefox replace a certificate on import ?

2013-11-11 Thread Julien Pierre
Jean-Philippe, On 11/7/2013 23:48, Jean-Philippe Franchini wrote: Hello, Our java application generates certificates with the Bouncy Castle library. When a certificate C1 imported in Firefox is about to expire, the application can renew it and creates a certificate C2 based on C1 information.

Re: how to make firefox replace a certificate on import ?

2013-11-11 Thread David Keeler
As I understand it, certificates in NSS are considered the same if they have the same serial number and issuer. When importing a certificate, NSS checks if it already has a certificate with the same serial number and issuer. If it does but they're not actually identical (e.g. if they have different