#43 Change the default certificate database format to SQLite.
Merged by rcritten. Opened by vcizek.
vcizek/mod_nss master  into  master

Download 43.patch

Since version 3.35, NSS uses by default the SQLite format for certificate
database. Adjust the documentation accordingly.

This change of behavior should otherwise be transparent.

Thanks for the patch. I'm not sure what state distributions are in regarding this. I know that Fedora is in the process of switching but what about Debian and its derivatives? Do you know?

NSS 3.35 was released in January, so it's adoption isn't widespread yet.

NSS 3.35 was accepted to Debian unstable. Stable is still using 3.26:
https://packages.debian.org/search?suite=default&section=all&arch=any&searchon=names&keywords=libnss3

The upcoming Ubuntu release has 3.35, but they have reverted the sql change for now:
https://launchpad.net/ubuntu/+source/nss/2:3.35-2ubuntu2

openSUSE Tumbleweed has 3.35 for some time now.

Is it too early for the change?

That's what I'm trying to find out :-)

Practically speaking I think the changes are ok I just want to be careful not to spread a bunch of chaos.

Let me run this past the freeIPA maintainer in Ubuntu to see if this will cause issues.

I checked with the Ubuntu IPA maintainer and he didn't think this would be a problem.

Thanks again for the patch, ack.

Pull-Request has been merged by rcritten

Metadata