certutil tool keeps asking for password even after giving correct password
Categories
(NSS :: Tools, defect, P4)
Tracking
(Not tracked)
People
(Reporter: sunny4saurabh, Unassigned)
Details
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36
Steps to reproduce:
./certutil -N -d .
after running the above command, password is set
./certutil -A -n Dendell012-Root -t "C,C,C" -i <xx.cer> -d .
after running the above command , it ask for password, and after providing the correct password which was set in first step, it keeps on asking password, like below
Enter Password or Pin for "NSS Certificate DB":
Enter Password or Pin for "NSS Certificate DB":
|
||
Updated•5 years ago
|
|
Reporter | |
Updated•5 years ago
|
|
||
Updated•5 years ago
|
|
|
Reporter | |
Comment 1•5 years ago
|
||
Can someone help
|
||
Comment 2•5 years ago
|
||
Is this a new problem with NSS 3.58, or are you aware of any version where this works as expected?
|
|
Reporter | |
Comment 3•5 years ago
|
||
earlier it was working fine when I built NSS 3.41 on AIX
|
|
Reporter | |
Comment 4•5 years ago
|
||
please see if you can help..I am stuck on this completely
|
|
||
Comment 5•5 years ago
|
||
Does it work if you initialize the database with the password that you want (instead of changing the password after initialization)?
That is, certutil -N -d . -f <password_file>
If not, please provide the command that you're using to change the password.
|
|
Reporter | |
Comment 6•5 years ago
|
||
what is the password file ?
when I run certutil -N -d . it will as for new password to set and create cert9.db and key4.db files
|
|
||
Comment 7•5 years ago
|
||
It's just a plaintext file containing the same password (for creating a database in non-interactive mode). See here: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil
|
|
Reporter | |
Comment 8•5 years ago
|
||
when i run using password file, it doesnt ask to enter password, but again when i insert the certificates it keeps on asking when i run the below command
./certutil -A -n Dendell012-Root -t "C,C,C" -i <.cer file> -d .
|
|
||
Comment 9•5 years ago
|
||
I'm not sure what to make of this. The behavior you describe is expected when the password is incorrect, but this sequence of steps works correctly for me on 3.41 and 3.60. These commands also run in CI on every push.
You'll probably need to narrow this down some more (to a specific version, OS, etc.), as it seems to be related to your environment somehow.
|
|
Reporter | |
Comment 10•5 years ago
|
||
I am running on AIX, and I have only built the libraries nss.
|
|
Reporter | |
Comment 11•5 years ago
|
||
when the password is incorrect, it should throw invalid password error, but instead it keeps on asking password and also inserts the certificates into cer9.db file which should not happen when the password is incorrect
|
|
Reporter | |
Comment 12•5 years ago
|
||
Hi, can anyone have a check on this. we are stuck because of this
|
|
Reporter | |
Updated•5 years ago
|
|
|
||
Comment 13•5 years ago
|
||
Please stop messing with this bug's metadata.
|
|
||
Updated•5 years ago
|
|
|
Reporter | |
Comment 14•5 years ago
|
||
Sure, But I need somehelp on this, Unable to proceed because of this issue. This Bug is still in open status from long time
|
|
||
Comment 15•5 years ago
|
||
Nobody else has reported this issue, it's not reproducible on other platforms, and few have AIX platforms to test on (I certainly don't).
I've asked for a specific version where the behavior changes, but you haven't provided it. This sounds like a good opportunity for you to debug the issue and provide more detail in an actionable bug report.
Description
•