Home

To add p11-kit-trust module into an NSS database:

$ modutil -dbdir nssdb -add p11-kit-trust -libfile /usr/lib64/pkcs11/p11-kit-trust.so

WARNING: Performing this operation while the browser is running could cause
corruption of your security databases. If the browser is currently running,
you should exit browser before continuing this operation. Type
'q <enter>' to abort, or <enter> to continue:


WARNING: Manually adding a module while p11-kit is enabled could cause
duplicate module registration in your security database. It is suggested
to configure the module through p11-kit configuration file instead.

Type 'q <enter>' to abort, or <enter> to continue:

Module "p11-kit-trust" added to database.

Verify with this command:

$ certutil -L -d nssdb -h p11-kit-trust

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

System Trust:win-RDU2-WINCA02-CA                             CT,C,C
Default Trust:A-Trust-Qual-02                                ,,C
Default Trust:A-Trust-Qual-03                                ,,C
Default Trust:A-Trust-Root-05                                ,,C
Default Trust:A-Trust-nQual-03                               ,,C
Default Trust:AC1 RAIZ MTIN                                  ,,C
...