Setup guide
14 Netscape Certificate Management System Command-Line Tools Guide • May 2002
certutil
(Certificate and Key Database Tool)
View and manipulate the certificate database (cert7.db)andkey
database (key3.db) contents. For details, check the
http://www.mozilla.org/projects/security/pki/nss
/tools/.site.
setpin
(PIN Generator tool)
Generates PINs for end users for directory- and PIN-based
authentication. For details, see Chapter 4, “PIN Generator Tool.”
signtool
(Netscape Signing Tool)
Digitally signs any file, including log files. For details, check the
http://www.mozilla.org/projects/security/pki/nss
/tools/.site.
ssltap
(SSL Debugging Tool)
Used to debug SSL applications. For details, check the
http://www.mozilla.org/projects/security/pki/nss
/tools/.site.
Perl Scripts located under <server_root>/bin/cert/tools (require _perl):
cmsbackup Copies all of t he pertinent data and configuration files for a CMS
instance, the local Administration Server, and local Netscape
DirectoryServersthatthe instance usesintoa compressedarchive.
For details, see Chapter 6, “Backing Up and Restoring Data.”
cmsrestore Opensanamedarchive, extractsthedata,andusesit to restorethe
configuration of a CMS instance. For details, see Chapter 6,
“Backing Up and Restoring Data.”
Executable tools located under <server_root>/shared/bin:
modutil
(Security Module Database Tool)
Used for managing the PKCS #11 module information within
secmod.db files or within hardwaretokens.For details,check the
http://www.mozilla.org/projects/security/pki/nss
/tools/.site.
Third-party executable tools located under <server_root>/bin/cert/tools:
dumpasn1 Dumps the contentsofbinarybase-64-encodeddata.Notethatthe
tool is freeware that is packaged with Certificate Management
System for your convenience. For more information about this
tool, check this site: http://www.cs.auckland.ac.nz/~pgut001/
Third-party support tools located under <server_root>:
Table 1-1 Summary of command-line utilities (Continued)
Utility/Tool Function