On 3/15/23 8:39 AM, Usha Nayak wrote:
Hello,
We are building NSS and are packing it in our product. For our
application we use IAIK PKCS#11 wrapper to connect to NSS.
Following properties file contains information that's used by iaik to
connect to NSS :
image.png
We use following commands to create DB:
"NSS\bin\modutil.exe" -force -create -dbdir sql:"%XXX%\data\NSS\db"
As far as I know we are using the sqllite lib that's packaged in
NSS3.88. Are there plans to upgrade it? If there are security
concerns, what cna we do to mitigate it ?
The image is missing, so a vital part of our question isn't visible.
That being said, we usually update sqlite when we need to to fix NSS
issues, or if NSS needs to use more advanced sqlite features.
Many users of NSS provide their own copy of sqlite (either because they
have their own copy as part of a larger application... like firefox, or
because sqlite is provided by the os (like many Linux distributions). If
you are concerned with shipping or using the older version of sqlite3,
you could build our own from the sqlite3 project and use it.
bob
Any help greatly appreciated
Thanks.
--
You received this message because you are subscribed to the Google
Groups "dev-tech-crypto@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to dev-tech-crypto+unsubscr...@mozilla.org.
To view this discussion on the web visit
https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/88ae58f8-c4c2-4f91-aa85-eccc3c745d71n%40mozilla.org
<https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/88ae58f8-c4c2-4f91-aa85-eccc3c745d71n%40mozilla.org?utm_medium=email&utm_source=footer>.
--
You received this message because you are subscribed to the Google Groups
"dev-tech-crypto@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to dev-tech-crypto+unsubscr...@mozilla.org.
To view this discussion on the web visit
https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/d868fcdb-cd3a-c49b-66af-00c389425b8e%40redhat.com.
