nss.nss

This module implements the NSS functions

Functions

algtag_to_mechanism(algtag)

base64_to_binary(text)

cert_crl_reason_from_name

crl_reason_from_name(name) -> int

cert_crl_reason_name

crl_reason_name(reason) -> string

cert_general_name_type_from_name

general_name_type_from_name(name) -> int

cert_general_name_type_name

general_name_type_name(type) -> string

cert_type_flags(flags[, repr_kind])

cert_usage_flags(flags[, repr_kind])

clear_ocsp_cache()

Removes all items currently stored in the OCSP cache.

create_context_by_sym_key(mechanism, ...[, ...])

create_digest_context(hash_alg)

create_pbev2_algorithm_id([pbe_alg, ...])

data_to_hex(data[, octets_per_line, separator])

decode_der_crl(der_crl[, type, decode_options])

der_universal_secitem_fmt_lines(sec_item[, ...])

disable_ocsp_checking([certdb])

disable_ocsp_default_responder([certdb])

dump_certificate_cache_info()

Dump the contents of the certificate cache and the temporary cert store to stdout.

enable_ocsp_checking([certdb])

enable_ocsp_default_responder([certdb])

find_cert_from_nickname(nickname, ...)

find_certs_from_email_addr(email, ...)

find_certs_from_nickname(email, [user_data1, ...)

find_key_by_any_cert(cert, [user_data1, ...])

find_slot_by_name(name)

fingerprint_format_lines(data[, level])

generate_new_param(mechanism[, sym_key])

generate_random(num_bytes)

get_all_tokens([mechanism, need_rw, ...])

get_best_slot(mechanism, [user_data1, ...])

get_block_size(mechanism[, sec_param])

get_cert_nicknames(certdb, what, ...)

get_default_certdb()

Returns the default certificate database as a CertDB object

get_internal_key_slot()

Get the default internal key slot.

get_internal_slot()

Get the default internal slot.

get_iv_length(mechanism)

get_pad_mechanism(mechanism)

get_use_pkix_for_validation()

Returns the current value of the flag used to enable or disable the use of PKIX for certificate validation.

hash_buf

hash_buf(hash_alg, data) --> digest

import_crl(slot, der_crl, url, type, ...)

import_sym_key(slot, mechanism, origin, ...)

indented_format(line_fmt_tuples[, indent_len])

The function supports the display of complex objects which may be composed of other complex objects.

is_fips()

pk11_is_fips() -> bool

key_mechanism_type_from_name(name)

key_mechanism_type_name(mechanism)

key_usage_flags(flags[, repr_kind])

list_certs(type, [user_data1, ...])

make_line_fmt_tuples(level, obj)

md5_digest

md5_digest(data) --> digest

mechanism_to_algtag(mechanism)

need_pw_init()

pk11_need_pw_init() -> bool

nss_get_version()

Return a string of the NSS library version

nss_init(cert_dir)

nss_init_context([cert_dir, cert_prefix, ...])

nss_init_flags(flags[, repr_kind])

nss_init_nodb()

Performs tasks required to run Network Security Services without setting up configuration files.

nss_init_read_write(cert_dir)

nss_initialize([cert_dir, cert_prefix, ...])

nss_is_initialized()

nss_is_initialized() --> bool

nss_shutdown()

Closes the key and certificate databases that were opened by nss_init().

nss_shutdown_context(context)

nss_version_check

nss_version_check(version) --> bool

oid_dotted_decimal(oid)

oid_str(oid)

oid_tag(oid)

oid_tag_name(oid)

param_from_algid(algid)

param_from_iv(mechanism[, iv])

pk11_attribute_type_from_name(name)

pk11_attribute_type_name(type)

pk11_disabled_reason_name(reason)

pk11_disabled_reason_str(reason)

pk11_logout_all()

Logout of every slot for all modules.

pkcs12_cipher_from_name(name)

pkcs12_cipher_name(cipher)

pkcs12_enable_all_ciphers()

Enables all PKCS12 ciphers, which are:

pkcs12_enable_cipher(cipher, enabled)

pkcs12_export

pkcs12_export(nickname, pkcs12_password, key_cipher=SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC, cert_cipher=SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC, pin_args=None)

pkcs12_map_cipher(cipher[, key_length])

pkcs12_set_nickname_collision_callback(callback)

pkcs12_set_preferred_cipher(cipher, enabled)

pub_wrap_sym_key(mechanism, pub_key, sym_key)

read_der_from_file(file[, ascii])

read_hex(input[, separators])

set_ocsp_cache_settings(max_cache_entries, ...)

set_ocsp_default_responder(certdb, url, nickname)

set_ocsp_failure_mode(failure_mode)

set_ocsp_timeout(seconds)

set_password_callback(callback)

set_shutdown_callback(callback, [user_data1, ...)

set_use_pkix_for_validation(flag)

sha1_digest

sha1_digest(data) --> digest

sha256_digest

sha256_digest(data) --> digest

sha512_digest

sha512_digest(data) --> digest

token_exists()

pk11_token_exists(mechanism) -> bool

x509_alt_name(sec_item[, repr_kind])

x509_cert_type(bitstr[, repr_kind])

x509_ext_key_usage(sec_item[, repr_kind])

x509_key_usage(bitstr[, repr_kind])

Classes

AVA

An object representing an AVA (attribute value assertion).

AlgorithmID

An object representing a signature algorithm

AuthKeyID

An object representing Authentication Key ID extension

AuthorityInfoAccess()

An object representing AuthorityInfoAccess.

AuthorityInfoAccesses(data)

BasicConstraints

An object representing X509 Basic Constraints Extension

CRLDistributionPoint

An object representing a CRL Distribution Point

CRLDistributionPts

An object representing CRL Distribution Points list

CertAttribute()

An object representing CertAttribute.

CertDB

An object representing a Certificate Database

CertVerifyLog()

An object which collects diagnostic information during certification validation.

CertVerifyLogNode()

An object detailing specific diagnostic information concerning a single failure during certification validation.

Certificate(data[, certdb, perm, nickname])

CertificateExtension

An object representing a certificate extension

CertificateRequest([data])

DN

An object representing an X501 Distinguished Name (e.g DN).

DSAPublicKey

A object representing a DSA Public Key

GeneralName

An object representing a GeneralName or list of GeneralNames.

InitContext()

An object representing NSSInitContext

InitParameters

An object representing NSS Initialization Parameters

KEYPQGParams([prime, subprime, base])

PK11Context

PK11Slot

An object representing a PKCS #11 Slot

PK11SymKey

Holds a hash, encryption or signing context for multi-part operations.

PKCS12DecodeItem

An object representing an item in a PKCS12 collection.

PKCS12Decoder(file, password[, slot])

PrivateKey

An object representing a Private Key

PublicKey

An object representing a Public Key

RDN

An object representing an X501 Relative Distinguished Name (e.g. RDN).

RSAGenParams([key_size, public_exponent])

RSAPublicKey

An object representing an RSA Public Key

SecItem([data, type, ascii])

SignedCRL

An object representing a signed certificate revocation list

SignedData

A object representing a signature

SubjectPublicKeyInfo

An object representing a Subject Public Key