From Fedora Project Wiki
Description
This test case verifies properly enabling system NSS.
How to test
- As root, install
nss-sysinit
:yum install nss-sysinit
- The command
nss-sysinit
has a post install scriplet that invokes/usr/bin/setup-nsssysint.sh on
. This scripts edits/etc/pki/nssdb/pkcs11.txt
as follows:- In the stanza with NSS Internal PKCS #11 Module, change the library= section to the following:
library=libnsssysinit.so
- In the same NSS stanza, update the Flags to include moduleDBOnly. For example:
Flags=internal,moduleDBOnly,critical
- In the stanza with NSS Internal PKCS #11 Module, change the library= section to the following:
- The
nss-sysinit
has a preuninstall install scriplet that invokes/usr/bin/setup-nsssysint.sh off
which undoes these changes. - Next, create sl dsb's from the local dbm database. As root run:
certutil -K -X -d sql:/etc/pki/nssdb
Expected Results
FIXME