1341302 - certutil --pss is undocumented

Status: RESOLVED FIXED

(NSS :: Tools, defect)

Description

[Hubert Kario]

Running the following commands works:

mkdir nssdb/
certutil -N --empty-password -d sql:nssdb/
dd if=/dev/urandom of=noise bs=1 count=32
certutil -S -z ./noise -n rsaca -s "cn=RSA PSS Testing CA" -t "C,C,C" -m 1000 -Z SHA256 -k rsa -g 2048 -x -v 12 -d sql:nssdb/ --keyUsage digitalSignature,certSigning,crlSigning,critical -2 --pss


Generating key.  This may take a few moments...

Is this a CA certificate [y/N]?
y
Enter the path length constraint, enter to skip [<0 for unlimited path]: > 0
Is this a critical extension [y/N]?
y


but --pss is not documented in -H messages:

certutil -H 2>&1 | grep -i pss
echo $?
1

running 3.29.2 beta (13162:c01143dead54)

Comment 1

[Daiki Ueno [:ueno]]

Attachment: certutil-pss-doc-fix.patch

Comment 2

[Daiki Ueno [:ueno]]

Thank you for the review.  Landed as:
https://hg.mozilla.org/projects/nss/rev/c04395842414