Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NSS: change implementation of IsKnownCA #1298

Open
Thykof opened this issue Dec 18, 2023 · 0 comments
Open

NSS: change implementation of IsKnownCA #1298

Thykof opened this issue Dec 18, 2023 · 0 comments
Labels
cert-host Issue related to certificate, access to .massa

Comments

@Thykof
Copy link
Contributor

Thykof commented Dec 18, 2023

Context
Describe / explain why we should do this: motivations, context or other info. Keep it brief and simple - PM

On MacOS, with firefox, we have removed the installation of the nss library used to install the root CA in the nss database that enable https to work on firefox.

If the user install the nss lib manually, he must be able to run the repair mode of massa station in sudo to install the root CA in the nss database.

The problem is that if a CA is already present in the nss database but is not the same saved in /etc/massastation/certs, our current repair mode will detect that the CA is already present, and consequently not install the CA in /etc/massastation/cert, because the comparison is based on the name of the CA, not the content.

We would like to improve the way the repair mode check if the CA is known by the nss database:

return s.runner.Run("-V", "-d", dbPath, "-u", "L", "-n", certificateName)

User flow
Describe the user flow using user stories so the end result is super clear - PM

How to
List the step-by-step to get it do if needed - PM

Technical details
Give the technical insights so anyone in the team can tackle the tasks - Dev

QA testing
Does this task require some QA tests ?
If yes, explain how to validate it

@Thykof Thykof added the cert-host Issue related to certificate, access to .massa label May 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cert-host Issue related to certificate, access to .massa
Projects
None yet
Development

No branches or pull requests

1 participant