canmove, Confirmed users
937
edits
| Line 86: | Line 86: | ||
=== SQLite-Based Multiaccess Certificate and Key Databases === | === SQLite-Based Multiaccess Certificate and Key Databases === | ||
Many client applications, such as | Many client applications, such as Firefox, Thunderbird, Evolution, and OpenOffice.org, use NSS, but they each have their own certificate and key databases. As a result, for example, if you import and trust a certificate in Firefox, you will not see it in Thunderbird. This is because Berkeley DB 1.85, the database NSS currently uses, can't be used by multiple processes. | ||
Although new versions of Berkeley DB (from Sleepycat Software) support multiprocess access, its open source license is incompatible with the Mozilla Public License (MPL). | Although new versions of Berkeley DB (from Sleepycat Software) support multiprocess access, its open source license is incompatible with the Mozilla Public License (MPL). | ||
We are planning to implement a multiaccess database using [http://www.sqlite.org/ SQLite], which | We are planning to implement a multiaccess database using [http://www.sqlite.org/ SQLite], which is in the "public domain". Other Mozilla teams are adopting SQLite, making it a logical choice for the NSS project as well. | ||
Since libpkix is significant amount of work, it is likely that the multiaccess database feature will be postponed to NSS 3.13. | Since libpkix is significant amount of work, it is likely that the multiaccess database feature will be postponed to NSS 3.13. | ||
<b>Note:</b> This change will affect code inside the FIPS 140-2 defined module boundaries. Therefore, we will need to document these changes and obtain a delta validation. | <b>Note:</b> This change will affect code inside the FIPS 140-2 defined cryptographic module boundaries. Therefore, we will need to document these changes and obtain a delta validation. | ||
= Future Work: NSS 3.13 and Beyond = | = Future Work: NSS 3.13 and Beyond = | ||