439
edits
NSS:ToolsToShip: Difference between revisions
→Group 4: Undocumented tools that should not get shipped
| (10 intermediate revisions by 6 users not shown) | |||
| Line 1: | Line 1: | ||
Which tools should be shipped with NSS? | Which tools should be shipped with NSS? | ||
On operating systems that ship NSS as a system library, it's a good idea to ship the NSS tools as well. This page is meant to reach an agreement which tools can be shipped and what requirements that would have. | On operating systems that ship NSS as a system library, it's a good idea to ship the NSS tools as well. This page is meant to reach an agreement on which tools can be shipped and what requirements that would have. | ||
==Proposal: main tools vs. unsupported tools== | ==Proposal: main tools vs. unsupported tools== | ||
Distinguish between: | |||
*"main" tools that get installed in the global program search path (like /usr/bin on Linux) and should therefore be documented and part of NSS | *"main" tools that get installed in the global program search path (like /usr/bin on Linux) and should therefore be documented and part of NSS QA | ||
*"unsupported" tools that do not have documentation, that are not necessarily part of the NSS QA, that will not get installed in the search path, but in a secondary location like /usr/lib/nss/unsupported-tools | *"unsupported" tools that do not have documentation, that are not necessarily part of the NSS QA, that will not get installed in the search path, but in a secondary location like /usr/lib/nss/unsupported-tools | ||
| Line 20: | Line 20: | ||
==Group 1: Tools that are shipping already== | ==Group 1: Tools that are shipping already== | ||
The following tools | The following tools have sufficient docs and are already being shipped by some vendors: | ||
Note the NSS tools documentation page is at: http://www.mozilla.org/projects/security/pki/nss/tools/ | Note the NSS tools documentation page is at: http://www.mozilla.org/projects/security/pki/nss/tools/ | ||
*certutil | *certutil | ||
*modutil | *modutil | ||
* | *pk12util | ||
*signtool | *signtool | ||
*ssltap | *ssltap | ||
| Line 51: | Line 51: | ||
No docs. Proposal: do NOT package this tool | No docs. Proposal: do NOT package this tool | ||
This tool is also not development complete. It will also need to be adjusted to work on sqlite databases as well. | |||
==Group 3: Requested or | ==Group 3: Requested or proposed unsupported tools== | ||
We received requests to ship the following tools | We received requests to ship the following tools. | ||
*derdump | *derdump | ||
*pp | *pp | ||
| Line 64: | Line 65: | ||
For the following tools we have not yet been asked to ship them, but they all seem to provide a functionality that might eventually be helpful while debugging or testing: | For the following tools we have not yet been asked to ship them, but they all seem to provide a functionality that might eventually be helpful while debugging or testing: | ||
* | *shlibsign | ||
*symkeyutil | *symkeyutil (This tool is currently incomplete, but would provided needed functionality if it were). | ||
*vfychain | *vfychain | ||
*strsclnt | |||
Assumption: nobody volunteers to write documentation for them short term. | Assumption: nobody volunteers to write documentation for them short term. | ||
| Line 79: | Line 77: | ||
It seems unlikely that non-NSS developers might want to use the following tools in their current state: | It seems unlikely that non-NSS developers might want to use the following tools in their current state: | ||
*addbuiltin | |||
*bltest | *bltest | ||
*certcgi | *certcgi | ||
| Line 92: | Line 91: | ||
*minigzip | *minigzip | ||
*oidcalc | *oidcalc | ||
*p7content | |||
*p7env | |||
*p7sign | |||
*p7verify | |||
*pk11mode | |||
*pk11util - this is a useful tool for PKCS #11 developers. It might be a candidate for a pkcs 11 devel package. | |||
*rsaperf | *rsaperf | ||
*sdrtest | *sdrtest | ||
*server | *server | ||
* | |||
==Group 5: Undocumented tools that currently aren't built, but may be candidates for support == | |||
There are several tools that are currently not built as part of NSS. Some of these tools may have some utility. | |||
*pwdecrypt - read a file with base64 SDR encrypted data and replace that data with decrypted data (useful in reading mozilla password files without a mozilla app). | |||
[[Category:NSS]] | |||