Noriko Hosoi wrote:
On 11/17/2016 06:36 AM, Rob Crittenden wrote:
> William Brown wrote:
>>
https://fedorahosted.org/389/ticket/49041
>>
>>
https://fedorahosted.org/389/attachment/ticket/49041/0001-Ticket-49041-SS...
>>
>>
>> I think this should be reviewed urgently and backported. This can cause
>> SSL to fail to start on F24 and higher without explanation.
> key4.db and cert9.db are the sqlite databases. Does 389-ds support
> specifying sql:/path/to/database/dir?
>
> rob
> _______________________________________________
> 389-devel mailing list -- 389-devel(a)lists.fedoraproject.org
> To unsubscribe send an email to 389-devel-leave(a)lists.fedoraproject.org
We have a plan to switch [1] but when we discussed in the team, we
concluded it was not urgent. I don't think NSS stops supporting the old
BDB format very soon?
My question revolves around how likely this is to happen to make it
urgent. If 389-ds doesn't support sqlite databases then how are
key4/cert9 files going to end up being created? Or is sqlite now the
default format for the NSS utilities so merely using certutil would
generate them?
rob