NSS Tools

Installation

$ dnf install nss-tools

certutil

See certutil.

modutil

See modutil.

pk12util

To export a certificate, its key, and the certificate chain from NSS database into a PKCS #12 file:

$ pk12util \
 -d <NSS database> \
 -K <NSS password> \
 -o <PKCS #12 file> \
 -W <PKCS #12 password> \
 -n <nickname>

See also PKI PKCS12 CLI.

ssltap

Start ssltap:

$ ssltap -sxl $HOSTNAME:8443

Then use a browser to open port 1924.

selfserv

To run an SSL server:

$ /usr/lib64/nss/unsupported-tools/selfserv -d nssdb -n sslserver -p 8443 -w Secret.123 -V tls1.0:tls1.2

tstclnt

To run an SSL client:

$ /usr/lib64/nss/unsupported-tools/tstclnt -d nssdb -b -V tls1.0:tls1.2 -C -h $HOSTNAME -p 8443

listsuites

To display cipher suites:

$ /usr/lib64/nss/unsupported-tools/listsuites