diff -up ./doc/certutil.xml.no-dbm ./doc/certutil.xml
--- ./doc/certutil.xml.no-dbm 2021-05-21 12:42:48.265469054 -0700
+++ ./doc/certutil.xml 2021-05-21 12:45:30.467429973 -0700
@@ -205,8 +205,7 @@ If this option is not used, the validity
certutil supports two types of databases: the legacy security databases (cert8.db, key3.db, and secmod.db) and new SQLite databases (cert9.db, key4.db, and pkcs11.txt).
NSS recognizes the following prefixes:
- sql: requests the newer database
- dbm: requests the legacy database
+ sql: requests the sql-lite database
If no prefix is specified the default type is retrieved from NSS_DEFAULT_DB_TYPE. If NSS_DEFAULT_DB_TYPE is not set then sql: is the default.
@@ -1205,17 +1204,9 @@ BerkeleyDB. These new databases provide
-Because the SQLite databases are designed to be shared, these are the shared database type. The shared database type is preferred; the legacy format is included for backward compatibility.
+Because the SQLite databases are designed to be shared, these are the shared database type.
By default, the tools (certutil, pk12util, modutil) assume that the given security databases use the SQLite type.
-Using the legacy databases must be manually specified by using the dbm: prefix with the given security directory. For example:
-
-$ certutil -L -d dbm:/home/my/sharednssdb
-
-To set the legacy database type as the default type for the tools, set the NSS_DEFAULT_DB_TYPE environment variable to dbm:
-export NSS_DEFAULT_DB_TYPE="dbm"
-
-This line can be set added to the ~/.bashrc file to make the change permanent.
diff -up ./doc/modutil.xml.no-dbm ./doc/modutil.xml
--- ./doc/modutil.xml.no-dbm 2021-05-21 12:43:00.233540013 -0700
+++ ./doc/modutil.xml 2021-05-21 12:47:51.236262211 -0700
@@ -151,7 +151,7 @@
-dbdir directory
Specify the database directory in which to access or create security module database files.
- modutil supports two types of databases: the legacy security databases (cert8.db, key3.db, and secmod.db) and SQLite databases (cert9.db, key4.db, and pkcs11.txt). If the prefix dbm: is not used, then the tool assumes that the given databases are in SQLite format.
+ modutil supports SQLite databases (cert9.db, key4.db, and pkcs11.txt).
@@ -689,15 +689,7 @@ BerkleyDB. These new databases provide m
Because the SQLite databases are designed to be shared, these are the shared database type. The shared database type is preferred; the legacy format is included for backward compatibility.
-By default, the tools (certutil, pk12util, modutil) assume that the given security databases use the SQLite type.
-Using the legacy databases must be manually specified by using the dbm: prefix with the given security directory. For example:
-
-modutil -create -dbdir dbm:/home/my/sharednssdb
-
-To set the legacy database type as the default type for the tools, set the NSS_DEFAULT_DB_TYPE environment variable to dbm:
-export NSS_DEFAULT_DB_TYPE="dbm"
-
-This line can be added to the ~/.bashrc file to make the change permanent for the user.
+By default, the tools (certutil, pk12util, modutil) assume that the given security databases use the SQLite type.
diff -up ./doc/pk12util.xml.no-dbm ./doc/pk12util.xml
--- ./doc/pk12util.xml.no-dbm 2021-05-21 12:43:13.713619936 -0700
+++ ./doc/pk12util.xml 2021-05-21 12:49:41.936916666 -0700
@@ -90,7 +90,7 @@
-d directory
Specify the database directory into which to import to or export from certificates and keys.
- pk12util supports two types of databases: the legacy security databases (cert8.db, key3.db, and secmod.db) and new SQLite databases (cert9.db, key4.db, and pkcs11.txt). If the prefix dbm: is not used, then the tool assumes that the given databases are in the SQLite format.
+ pk12util supports SQLite databases (cert9.db, key4.db, and pkcs11.txt).
@@ -394,15 +394,7 @@ BerkleyDB. These new databases provide m
Because the SQLite databases are designed to be shared, these are the shared database type. The shared database type is preferred; the legacy format is included for backward compatibility.
-By default, the tools (certutil, pk12util, modutil) assume that the given security databases use the SQLite type
-Using the legacy databases must be manually specified by using the dbm: prefix with the given security directory. For example:
-
-# pk12util -i /tmp/cert-files/users.p12 -d dbm:/home/my/sharednssdb
-
-To set the legacy database type as the default type for the tools, set the NSS_DEFAULT_DB_TYPE environment variable to dbm:
-export NSS_DEFAULT_DB_TYPE="dbm"
-
-This line can be set added to the ~/.bashrc file to make the change permanent.
+By default, the tools (certutil, pk12util, modutil) assume that the given security databases use the SQLite type.
diff -up ./doc/signver.xml.no-dbm ./doc/signver.xml
--- ./doc/signver.xml.no-dbm 2021-05-21 12:43:30.770721069 -0700
+++ ./doc/signver.xml 2021-05-21 12:51:10.151438209 -0700
@@ -66,7 +66,7 @@
-d directory
Specify the database directory which contains the certificates and keys.
- signver supports two types of databases: the legacy security databases (cert8.db, key3.db, and secmod.db) and new SQLite databases (cert9.db, key4.db, and pkcs11.txt). If the prefix dbm: is not used, then the tool assumes that the given databases are in the SQLite format.
+ signver supports SQLite databases (cert9.db, key4.db, and pkcs11.txt).
-a
@@ -155,15 +155,7 @@ BerkleyDB. These new databases provide m
Because the SQLite databases are designed to be shared, these are the shared database type. The shared database type is preferred; the legacy format is included for backward compatibility.
-By default, the tools (certutil, pk12util, modutil) assume that the given security databases use the SQLite type
-Using the legacy databases must be manually specified by using the dbm: prefix with the given security directory. For example:
-
-# signver -A -s signature -d dbm:/home/my/sharednssdb
-
-To set the legacy database type as the default type for the tools, set the NSS_DEFAULT_DB_TYPE environment variable to dbm:
-export NSS_DEFAULT_DB_TYPE="dbm"
-
-This line can be added to the ~/.bashrc file to make the change permanent for the user.
+By default, the tools (certutil, pk12util, modutil) assume that the given security databases use the SQLite type.