59614 - Check tool for creating certdata.txt into CVS tree

Status: RESOLVED FIXED

(NSS :: Libraries, defect, P3)

Description

[Ben Bucksch (:BenB)]

The source file which holds the root certs
<http://lxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt
> is in a proprietary (home-grown?) file format and created by a certain tool.
This tool is currently only available to Netscape. Other source code users
(read: distributors) may want to add certs for their own distribution, or
contributors may want to add certs to the Mozilla tree (after having fulfilled
the legal requirements). So, please make this tool publically available by
checkin it into the Mozilla CVS tree.

Note that this is an MPL requirement per 1.11:
<quote>
1.11. ''Source Code'' means the preferred form of the Covered  Code for making
modifications to it, including all modules it contains,  plus any associated
interface definition files, scripts used to control  compilation and
installation of an Executable
</quote>

A small document about the legal requirements for root certs which ship with
apps/browsers would be nice, too.

Comment 1

[Ian McGreer]

tool is checked into nss/cmd/addbuiltin/

must be built separately.

use like so:

cat cacert.b64 | atob | addbuiltin -n "New CA Cert" -t "C,C,C" >> certdata.txt

or if the cert is already in binary, der-encoded form:

cat cacert.der | addbuiltin -n ...