cert7 file generation

cert7 file generation

It is tricky sometime as the latest nss tools will generate cert8.db
If you need cert7 only because of some reason like ldap auth, or solaris lesser than 10 auth then you might be in need of generating cert7.db files only.

Here is a how you can do it with windows.

Download NSS with version  3.2.2 from ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases
you can go to command prompt and set path as

set path=%PATH%;C:\path\to\nssfolder\lib
also you might need nspr 4.6 for missing dll and library files.

You can download it from http://ftp.mozilla.org/pub/mozilla.org/nspr/releases/

also from the same command prompt set the path to the lib directory of nspr

set path=%PATH%;c:\path\to\nsprfolder\lib

Now you can execute

certutil -A -n "certificateName" -t "C,C,C" -a -i certFile -d path




Where certificate Name is optional
certfile is the .pem certificate file and
path is the path where you want your cert7.db files to be stored.


Read more to understand what each of these functions do  here.