View source for Notary

=Notary=
A XULRunner application for signing extentions.

==Planned==
* Allow self-signed certificates. This could be for people who may choose not to use AMO
* Create certificate requests? (I don't know what this is exactly. I only came across it. I have not been able to create one yet). I think this could be very useful if Mozilla can find an arrangement with a certificate authority.
* I think this should be more of an application rather than a wizard. Maybe include information about a certificate and certificate authorities (this will probably be more/less the same you get when open up the certificate manager in firefox.)

==Questions that get answered in time==
* How do we load certificates. From a file? From a website (can you do it from a website?)? I have only used self-signed certificates, and those usually come from files.
* How should this be related to Mozilla products (Firefox/thunderbird). From my understanding, Firefox and Thunderbird have different certificate files, for different profiles. Should we just use Firefox's? Should this be for a particular profile? Maybe I am not understanding this correctly.

==Hurdles==
*I am finding it difficult to get information on loading certificates. I think the function I am using is unable to do what I expect it to do. That is nsIX509CertDB doesn't actually handle databases (eg. cert8.db in firefox), but rather many individual certificates.<br/>While trying to find answers to whether nsIX509CertDB can handle the cert8.db file, I got the following response :<br/> “cesar: there are probably fewer than 3 people who might be able to answer your question w/o reading the sources. and they probably areds”<br/><br/>While reading the source, it seems that [http://mxr.mozilla.org/mozilla1.8/source/security/manager/pki/resources/content/certManager.js#437 *.db files aren't really accepted], but rather .crt and .cert (and more) files. So it looks like it only accepts individual files which it compiles into a database.
* Learning about security and how it works around FF should give me a better understanding of how to better accomplish my goals. I am not a security expert, just paranoid :)

==Notes==

<table width="100%" border="1">
<tr>
<td>secmod.db</td>
<td>PKCS #11 module information (I think this is hardware related. Hardware sucks, so forget this.)</td>
</tr>
<tr>
<td>key3.db</td>
<td>keys database (whatever this means)</td>
</tr>
<tr>
<td>cert8.db</td>
<td>certificates (.crt files?), This is a Berkley DB file according to the file command</td>
</tr>
</table>

* Unlike the name suggest, nsIX509CertDB.importCertsFromFile is not for importing Certs from a Database file. It is rather for importing a single CA certificate (stupid plural) from a file. XPCShell will crash and burn even if you are loading a valid certificate. XULRunner will not however. Important note to keep in mind while developing.
* It is also good to note that cert8.db, key3.db, and secmod.db do not exist until you use the function for the first time.  XULRunner does not create these files when creating a profile.
* Importing saves automatically.
* I may be able just to copy over certificates from firefox, and use them.