The derdump and cmsutils samples which are built along with NSS are really handy for debugging and generally diagnosing problems. I'd like for them to be included in either the nss-tools or (more likely) the nss-devel package so that I won't have to build them myself. There are probably other tools in there which are similarly useful, but I haven't had occasion to use them yet.
I agree with your request, and we could include additional command line tools, like pp, atob, btoa My concern is, should we really be adding those tools with their very short names, to the global search path? The tools are really intended for debugging only. Would it make sense to add those tools to some non-default path, so we have them available on the system, but they won't appear in the default search path? Maybe in /usr/lib/nss ? Opinions?
The Certificate System team also asked for atob and btoa recently. I am also worried that their names are too short and not appropriate for /usr/bin. Also these tools would need to be added to our QA test script and need to be documented in http://www.mozilla.org/projects/security/pki/nss/tools/.
Wan-Teh, suppose we add the tools to /usr/lib/nss/debugging-tools which is not in the default search path - could we live without QA and without documentation?
*** Bug 211190 has been marked as a duplicate of this bug. ***
I'd like to add ocspclnt, selfserv and tstclnt to the list.
We should make a pass at all the tools that NSS builds by default. Some tools should be added to nss-tools. Those that aren't added to nss-tools should be added to nss-devel. The nss-devel tools should live in a nss/debugging-tools directory (pick an appropriate Linux home). Tools in nss-tools should be have priority in being documented. The page at http://www.mozilla.org/projects/security/pki/nss/tools should move to a wikki. The tools that ship are a historical artifact. These are the tools that on one time the 'tools' team picked up to support (and thus were included with any server distribution). It was a minimal list. bob
The next nss rpm package, which will get published around the end of this week, will ship additional tools in a new directory /usr/lib/nss/unsupported-tools. For details see this page: http://wiki.mozilla.org/NSS:ToolsToShip
fixed in rawhide and latest FC6 NSS package