views:

18

answers:

0

Hi,

I am creating an app where I need to manage X.509 certificates programmatically. Till now I have been launching the certutil tool to create the cert database and add and delete certificates from it. The only task I am doing programmatically is to query the databse for a cert using CERT_FindCertbyName. However, I am thinking of removing the runtime dependency on certutil by doing all these tasks programmatically. Is that possible? At the minimum I should be able to add and delete certificates to the database programmatically. I can create an empty database using the certutil and package it with my app. I could not find any suitable API at https://developer.mozilla.org/en/NSS_Certificate_Functions.