Nerdy Drunk

Notes on how to use NSS. Most of the examples below are related to using NSS with Apache.

pk12util -i DOMAIN.TLD.p12 -d /etc/httpd/alias/ -W P12PASSWORD

• -i is the P12 file that you wish to import
• -d is the NSS database directory that you wish to use
• -W is the P12 password and can be obtained via $(SUBCOMMAND) such as aws ssm get-parameter

certutil -d /etc/httpd/alias/ -L

• -d is the NSS database directory that you wish to use
• -L is to list the certificates in the database

Use certutil to find the certificate nick name and update the NSSNickName in /etc/httpd/conf.d/nss.conf