311486 - pk12util export certificate only not the whole certificate chain

Status: NEW

(NSS :: Tools, enhancement, P3)

Description

[Pavel Pavlov]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.11) Gecko/20050728
Build Identifier: NSS_3_10

When exporing a certificate with the pk12util -o tool, the resulting file
contains the wanted certificate and the rest of the certificates from the chain,
e.g. issuer certificate and root CA certificate.
I want to be able to get an exported file with only the required certificate and
key. Ideally a new option can be added to the tool to control this behavior

Reproducible: Always

Steps to Reproduce:
1. Invoke the pk12util -o exp.pfx -n mycert ...
2. Observe the generated file contents, eg. pk12util -l exp.pfx

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

Neil, now that there's a patch for bug 311483, would you like to implement
a new command line option for pk12util, one that means "don't include the 
cert chain for the named cert" ?