2fdc2d0 CertDB: add API for non-destructive initialization from PKCS#12 bundle

1 file Authored by mbabinsk 2 years ago , Committed by jcholast 2 years ago ,
    CertDB: add API for non-destructive initialization from PKCS#12 bundle
    
    `create_from_pkcs12` method of CertDB was re-creating NSS database files
    during PKCS#12 bundle import. This may cause bugs because the file permissions
    could be re-set to wrong values causing subtle bugs. Modify the class API so
    that the server cert chain can be imported while preserving existing FS
    attributes.
    
    https://fedorahosted.org/freeipa/ticket/6429
    
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>
    
        
file modified
+8 -0