nss.nss

This module implements the NSS functions

Functions

algtag_to_mechanism(algtag)

Parameters

base64_to_binary(text)

Parameters

cert_crl_reason_from_name

crl_reason_from_name(name) -> int

cert_crl_reason_name

crl_reason_name(reason) -> string

cert_general_name_type_from_name

general_name_type_from_name(name) -> int

cert_general_name_type_name

general_name_type_name(type) -> string

cert_type_flags(flags[, repr_kind])

Parameters

cert_usage_flags(flags[, repr_kind])

Parameters

clear_ocsp_cache()

Removes all items currently stored in the OCSP cache.

create_context_by_sym_key(mechanism, ...[, ...])

Parameters

create_digest_context(hash_alg)

Parameters

create_pbev2_algorithm_id([pbe_alg, ...])

Parameters

data_to_hex(data[, octets_per_line, separator])

Parameters

decode_der_crl(der_crl[, type, decode_options])

Parameters

der_universal_secitem_fmt_lines(sec_item[, ...])

Parameters

disable_ocsp_checking([certdb])

Parameters

disable_ocsp_default_responder([certdb])

Parameters

dump_certificate_cache_info()

Dump the contents of the certificate cache and the temporary cert store to stdout.

enable_ocsp_checking([certdb])

Parameters

enable_ocsp_default_responder([certdb])

Parameters

find_cert_from_nickname(nickname, ...)

Parameters

find_certs_from_email_addr(email, ...)

Parameters

find_certs_from_nickname(email, [user_data1, ...)

Parameters

find_key_by_any_cert(cert, [user_data1, ...])

Parameters

find_slot_by_name(name)

Parameters

fingerprint_format_lines(data[, level])

Parameters

generate_new_param(mechanism[, sym_key])

Parameters

generate_random(num_bytes)

Parameters

get_all_tokens([mechanism, need_rw, ...])

Parameters

get_best_slot(mechanism, [user_data1, ...])

Parameters

get_block_size(mechanism[, sec_param])

Parameters

get_cert_nicknames(certdb, what, ...)

Parameters

get_default_certdb()

Returns the default certificate database as a CertDB object

get_internal_key_slot()

Get the default internal key slot.

get_internal_slot()

Get the default internal slot.

get_iv_length(mechanism)

Parameters

get_pad_mechanism(mechanism)

Parameters

get_use_pkix_for_validation()

Returns the current value of the flag used to enable or disable the use of PKIX for certificate validation.

hash_buf

hash_buf(hash_alg, data) --> digest

import_crl(slot, der_crl, url, type, ...)

Parameters

import_sym_key(slot, mechanism, origin, ...)

Parameters

indented_format(line_fmt_tuples[, indent_len])

The function supports the display of complex objects which may be composed of other complex objects.

is_fips

pk11_is_fips() -> bool

key_mechanism_type_from_name(name)

Parameters

key_mechanism_type_name(mechanism)

Parameters

key_usage_flags(flags[, repr_kind])

Parameters

list_certs(type, [user_data1, ...])

Parameters

make_line_fmt_tuples(level, obj)

Parameters

md5_digest

md5_digest(data) --> digest

mechanism_to_algtag(mechanism)

Parameters

need_pw_init

pk11_need_pw_init() -> bool

nss_get_version()

Return a string of the NSS library version

nss_init(cert_dir)

Parameters

nss_init_context([cert_dir, cert_prefix, ...])

Parameters

nss_init_flags(flags[, repr_kind])

Parameters

nss_init_nodb()

Performs tasks required to run Network Security Services without setting up configuration files.

nss_init_read_write(cert_dir)

Parameters

nss_initialize([cert_dir, cert_prefix, ...])

Parameters

nss_is_initialized

nss_is_initialized() --> bool

nss_shutdown()

Closes the key and certificate databases that were opened by nss_init().

nss_shutdown_context(context)

Parameters

nss_version_check

nss_version_check(version) --> bool

oid_dotted_decimal(oid)

Parameters

oid_str(oid)

Parameters

oid_tag(oid)

Parameters

oid_tag_name(oid)

Parameters

param_from_algid(algid)

Parameters

param_from_iv(mechanism[, iv])

Parameters

pk11_attribute_type_from_name(name)

Parameters

pk11_attribute_type_name(type)

Parameters

pk11_disabled_reason_name(reason)

Parameters

pk11_disabled_reason_str(reason)

Parameters

pk11_logout_all()

Logout of every slot for all modules.

pkcs12_cipher_from_name(name)

Parameters

pkcs12_cipher_name(cipher)

Parameters

pkcs12_enable_all_ciphers()

Enables all PKCS12 ciphers, which are:

pkcs12_enable_cipher(cipher, enabled)

Parameters

pkcs12_export

pkcs12_export(nickname, pkcs12_password, key_cipher=SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC, cert_cipher=SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC, pin_args=None)

pkcs12_map_cipher(cipher[, key_length])

Parameters

pkcs12_set_nickname_collision_callback(callback)

Parameters

pkcs12_set_preferred_cipher(cipher, enabled)

Parameters

pub_wrap_sym_key(mechanism, pub_key, sym_key)

Parameters

read_der_from_file(file[, ascii])

Parameters

read_hex(input[, separators])

Parameters

set_ocsp_cache_settings(max_cache_entries, ...)

Parameters

set_ocsp_default_responder(certdb, url, nickname)

Parameters

set_ocsp_failure_mode(failure_mode)

Parameters

set_ocsp_timeout(seconds)

Parameters

set_password_callback(callback)

Parameters

set_shutdown_callback(callback, [user_data1, ...)

Parameters

set_use_pkix_for_validation(flag)

Parameters

sha1_digest

sha1_digest(data) --> digest

sha256_digest

sha256_digest(data) --> digest

sha512_digest

sha512_digest(data) --> digest

token_exists

pk11_token_exists(mechanism) -> bool

x509_alt_name(sec_item[, repr_kind])

Parameters

x509_cert_type(bitstr[, repr_kind])

Parameters

x509_ext_key_usage(sec_item[, repr_kind])

Parameters

x509_key_usage(bitstr[, repr_kind])

Parameters

Classes

AVA

An object representing an AVA (attribute value assertion).

AlgorithmID

An object representing a signature algorithm

AuthKeyID

An object representing Authentication Key ID extension

AuthorityInfoAccess()

An object representing AuthorityInfoAccess.

AuthorityInfoAccesses(data)

Parameters

BasicConstraints

An object representing X509 Basic Constraints Extension

CRLDistributionPoint

An object representing a CRL Distribution Point

CRLDistributionPts

An object representing CRL Distribution Points list

CertAttribute()

An object representing CertAttribute.

CertDB

An object representing a Certificate Database

CertVerifyLog()

An object which collects diagnostic information during certification validation.

CertVerifyLogNode()

An object detailing specific diagnostic information concerning a single failure during certification validation.

Certificate(data[, certdb, perm, nickname])

Parameters

CertificateExtension

An object representing a certificate extension

CertificateRequest([data])

Parameters

DN

An object representing an X501 Distinguished Name (e.g DN).

GeneralName

An object representing a GeneralName or list of GeneralNames.

InitContext()

An object representing NSSInitContext

InitParameters

An object representing NSS Initialization Parameters

KEYPQGParams([prime, subprime, base])

Parameters

PK11Context

PK11Slot

An object representing a PKCS #11 Slot

PK11SymKey

Holds a hash, encryption or signing context for multi-part operations.

PKCS12DecodeItem

An object representing an item in a PKCS12 collection.

PKCS12Decoder(file, password[, slot])

Parameters

PrivateKey

An object representing a Private Key

PublicKey

An object representing a Public Key

PyDSAPublicKey

A object representing a DSA Public Key

PyRSAPublicKey

An object representing an RSA Public Key

RDN

An object representing an X501 Relative Distinguished Name (e.g.

RSAGenParams([key_size, public_exponent])

Parameters

SecItem([data, type, ascii])

Parameters

SignedCRL

An object representing a signed certificate revocation list

SignedData

A object representing a signature

SubjectPublicKeyInfo

An object representing a Subject Public Key