Bug 1057650 - RFE: support shared NSS database model
Summary: RFE: support shared NSS database model
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: mod_nss
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Rob Crittenden
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1183756
TreeView+ depends on / blocked
 
Reported: 2014-01-24 14:50 UTC by Rob Crittenden
Modified: 2016-01-06 00:04 UTC (History)
2 users (show)

Fixed In Version: mod_nss-1.0.11
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 1183756 (view as bug list)
Environment:
Last Closed: 2015-09-29 17:06:00 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Rob Crittenden 2014-01-24 14:50:02 UTC 
The existing NSS databases utilize the original pre-Sleepycat Berkeley DB model which is unsafe when being utilized by more than one process.

mod_nss should consider moving, or at least qualifying, the shared NSS SQLite DB model documented at:

    ​https://wiki.mozilla.org/NSS_Shared_DB
Comment 1 Rob Crittenden 2014-10-28 20:17:26 UTC 
It doesn't work as-is. mod_nss does a chdir to NSSCertificateDatabase which fails if prefixed with sql:

gencert doesn't handle a prefix properly either.
Comment 2 Rob Crittenden 2015-09-29 17:06:00 UTC 
This was added in mod_nss 1.0.11.
Note You need to log in before you can comment on or make changes to this bug.