Red Hat Bugzilla – Bug 201233
RFE: package additional command-line tools into nss-devel
Last modified: 2007-11-30 17:11:39 EST
The derdump and cmsutils samples which are built along with NSS are really handy
for debugging and generally diagnosing problems. I'd like for them to be
included in either the nss-tools or (more likely) the nss-devel package so that
I won't have to build them myself. There are probably other tools in there
which are similarly useful, but I haven't had occasion to use them yet.
I agree with your request, and we could include additional command line tools,
like pp, atob, btoa
My concern is, should we really be adding those tools with their very short
names, to the global search path? The tools are really intended for debugging only.
Would it make sense to add those tools to some non-default path, so we have them
available on the system, but they won't appear in the default search path?
Maybe in /usr/lib/nss ?
The Certificate System team also asked for atob and btoa
recently. I am also worried that their names are too
short and not appropriate for /usr/bin. Also these tools
would need to be added to our QA test script and need to
be documented in
Wan-Teh, suppose we add the tools to
which is not in the default search path - could we live without QA and without
*** Bug 211190 has been marked as a duplicate of this bug. ***
I'd like to add ocspclnt, selfserv and tstclnt to the list.
We should make a pass at all the tools that NSS builds by default. Some tools
should be added to nss-tools. Those that aren't added to nss-tools should be
added to nss-devel.
The nss-devel tools should live in a nss/debugging-tools directory (pick an
appropriate Linux home). Tools in nss-tools should be have priority in being
documented. The page at http://www.mozilla.org/projects/security/pki/nss/tools
should move to a wikki.
The tools that ship are a historical artifact. These are the tools that on one
time the 'tools' team picked up to support (and thus were included with any
server distribution). It was a minimal list.
The next nss rpm package, which will get published around the end of this week,
will ship additional tools in a new directory /usr/lib/nss/unsupported-tools.
For details see this page: http://wiki.mozilla.org/NSS:ToolsToShip
fixed in rawhide and latest FC6 NSS package