51226 - Backup of whole database to PKCS#12 (or similar file)

Status: RESOLVED WONTFIX

(Core Graveyard :: Security: UI, enhancement, P3)

Description

[Dr S N Henson]

The current options for backing up a certificate database only allow personal 
certificates and their chains to be exported to a PKCS#12 format file. It would 
be useful if the whole database could be backed up and restored, this would 
include all certificates, S/MIME capabilities and trust settings.

This would help for example when the database became corrupted because currently 
you lose any added CA certificates (and their trust settings) as well as S/MIME 
certificates.

This would also allow external programs to access the database information in a 
standard form.

If PKCS#12 was used for this then some new attributes would need to be added for 
trust settings and S/MIME capabilities, but MS for example have already added 
lots of (AFAIK undocumented) attributes for their own purposes.

Comment 1

[John Unruh]

Changing status to new.

Comment 2

[John Unruh]

Changing QA contact to nitinp

Comment 3

[John Unruh]

Mass reassigning nitinp's bugs to me.

Comment 4

[Bob Lord]

Cool idea.

Target -> 2.1

Comment 5

[Stephane Saux]

remove nsenterprise
We have too many bugs to fix to add new functionality.

Comment 6

[Stephane Saux]

Moving all P3 and P4 bugs targetted to 2.1 to future.

Comment 7

[John Unruh]

Mass assigning QA to ckritzer.

Comment 8

[Kai Engert (:KaiE:)]

Fixing this bug would also fix bug 155889, which asks for the ability to back up
the secret decoder ring key.

Comment 9

[John Unruh]

>Kaie