macOS
brew install nsslocal Homebrew formula metadata
sudo port install nssMacPorts ports tree · net/nss/Portfile · Quelle: api.github.com
brew
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für nss in AI-Agent-Workflows.
Installation
brew install nsslocal Homebrew formula metadata
sudo port install nssMacPorts ports tree · net/nss/Portfile · Quelle: api.github.com
sudo apk add nssAlpine Linux edge package indexes · nss · Quelle: dl-cdn.alpinelinux.org
sudo dnf install nssFedora Rawhide package metadata · nss · Quelle: dl.fedoraproject.org
nix profile install nixpkgs#nssnixpkgs package indexes · nss · Quelle: raw.githubusercontent.com
sudo pacman -S nssArch Linux sync databases · nss · Quelle: geo.mirror.pkgbuild.com
sudo apt install libnss3Debian stable package indexes · libnss3 · Quelle: deb.debian.org
sudo zypper install mozilla-nssopenSUSE Tumbleweed package metadata · mozilla-nss · Quelle: download.opensuse.org
Überblick
Libraries for security-enabled client and server applications
Verlauf
NSS, Network Security Services, is Mozilla's C library set for TLS, PKI, S/MIME, X.509 certificates, PKCS standards, and related crypto/security tasks. It descends from Netscape's browser and server security code and remains a major non-OpenSSL security stack.
Mozilla's archived NSS history says the code began as the base security code in the original Netscape Navigator products: Navigator 1.0 supported SSL 2.0, Navigator 2.0 added SSL 3.0 and server-side private-key support, Navigator 3.0 added client authentication, and Communicator 4.0 broke much of the security code into its own NSPR-dependent component.
After Communicator 4.0, the security code began shipping independently. The archived history describes HCL as the first independently buildable security-code line, with NSS 2.0 as the first release fully tested and made available outside Netscape. Firefox Source Docs describes the modern NSS package as MPL-2.0 libraries for security-enabled client and server applications.
NSS's adoption comes from browsers, mail clients, PKI tooling, and platforms that value its PKCS #11 model and Mozilla root store integration. Mozilla docs say it is used by Mozilla and other companies in Firefox, AOL Instant Messenger, Red Hat server products, and other products; Ubuntu documentation describes it as originally developed by Netscape, inherited by Mozilla, and used mainly in Firefox and Thunderbird on Ubuntu.
On July 1, 2026, Homebrew listed NSS 3.125 with 486,543 installs in its 365-day analytics window and 105,895 installs on request. Unlike NSPR, NSS is both a dependency and a directly requested toolkit because it ships command-line utilities such as `certutil`, `pk12util`, `modutil`, `vfychain`, and `tstclnt`.
Developers use NSS when they need Mozilla-compatible TLS/PKI behavior, PKCS #11 modules, certificate/key databases, S/MIME/CMS processing, or command-line certificate database management. The practical package-nerd workflow is often `certutil -d sql:...`, `pk12util`, `modutil`, and `nss-config`, especially when dealing with software that uses NSS databases rather than PEM files directly.
NSS depends on NSPR for cross-platform I/O and threading. Its architecture includes FreeBL, Softoken, CKBI built-in root certificates, certificate/key databases, and SSL/TLS and S/MIME modules, which is why it feels like a complete PKI stack rather than a small crypto primitive library.
NSS is significant because it is the Mozilla security stack: a browser-grade TLS/PKI implementation with command-line tools and a different trust/key storage model from OpenSSL. Packaging it correctly matters for browsers, certificate management, and any software linked against Mozilla's crypto libraries.
Sicherheitslage
Für nss wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
addbuiltin | cli | globales Executable | |
atob | cli | globales Executable | |
baddbdir | cli | globales Executable | |
bltest | cli | globales Executable | |
btoa | cli | globales Executable | |
certutil | cli | globales Executable | |
chktest | cli | globales Executable | |
cmsutil | cli | globales Executable | |
crlutil | cli | globales Executable | |
dbtest | cli | globales Executable | |
dbtool | cli | globales Executable | |
derdump | cli | globales Executable | |
dertimetest | cli | globales Executable | |
digest | cli | globales Executable | |
ecperf | cli | globales Executable | |
encodeinttest | cli | globales Executable | |
fbectest | cli | globales Executable | |
fipstest | cli | globales Executable | |
httpserv | cli | globales Executable | |
listsuites | cli | globales Executable | |
lowhashtest | cli | globales Executable | |
makepqg | cli | globales Executable | |
modutil | cli | globales Executable | |
multinit | cli | globales Executable | |
nonspr10 | cli | globales Executable | |
nss-config | cli | globales Executable | |
nss-policy-check | cli | globales Executable | |
nssdefaults | cli | globales Executable | |
ocspclnt | cli | globales Executable | |
ocspresp | cli | globales Executable | |
oidcalc | cli | globales Executable | |
p7content | cli | globales Executable | |
p7env | cli | globales Executable | |
p7sign | cli | globales Executable | |
p7verify | cli | globales Executable | |
pk11ectest | cli | globales Executable | |
pk11gcmtest | cli | globales Executable | |
pk11importtest | cli | globales Executable | |
pk11mode | cli | globales Executable | |
pk12util | cli | globales Executable | |
pk1sign | cli | globales Executable | |
pkix-errcodes | cli | globales Executable | |
pp | cli | globales Executable | |
pwdecrypt | cli | globales Executable | |
remtest | cli | globales Executable | |
rsaperf | cli | globales Executable | |
rsapoptst | cli | globales Executable | |
sdbthreadtst | cli | globales Executable | |
sdrtest | cli | globales Executable | |
secmodtest | cli | globales Executable | |
selfserv | cli | globales Executable | |
shlibsign | cli | globales Executable | |
signtool | cli | globales Executable | |
signver | cli | globales Executable | |
ssltap | cli | globales Executable | |
strsclnt | cli | globales Executable | |
symkeyutil | cli | globales Executable | |
tstclnt | cli | globales Executable | |
validation | cli | globales Executable | |
vfychain | cli | globales Executable | |
vfyserv | cli | globales Executable |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
https://firefox-source-docs.mozilla.org/security/nss/index.html
Installationsmetadaten
| Paketschlüssel | brew:nss |
|---|---|
| Version | 3.125 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/nss |
| Homepage | https://firefox-source-docs.mozilla.org/security/nss/index.html |
| Repository | https://hg.mozilla.org/projects/nss |
| Upstream-Dokumentation | https://firefox-source-docs.mozilla.org/security/nss/build.html |
| Lizenz | MPL-2.0 |
| Quellarchiv | https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_125_RTM/src/nss-3.125.tar.gz |
| Zuletzt aktualisiert | 2026-06-25T13:37:57+02:00 |
| Pulse | updated |
| Abhängigkeiten | nspr |
| Von macOS bereitgestellte Bibliotheken | sqlite |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | nss |
| Version Scheme | 0 |
| Revision | 0 |
| Conflicts With |
|
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
libnss3 2:3.110-1+deb13u1
Network Security Service libraries
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
sudo apt install libnss3libnss3-dev 2:3.110-1+deb13u1
Development files for the Network Security Service libraries
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
sudo apt install libnss3-devlibnss3-tools 2:3.110-1+deb13u1
Network Security Service tools
http://www.mozilla.org/projects/security/pki/nss/tools/
sudo apt install libnss3-toolsnss
nix profile install nixpkgs#nsslibnss3 2:3.98-1build1
Network Security Service libraries
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
sudo apt install libnss3libnss3-dev 2:3.98-1build1
Development files for the Network Security Service libraries
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
sudo apt install libnss3-devlibnss3-tools 2:3.98-1build1
Network Security Service tools
http://www.mozilla.org/projects/security/pki/nss/tools/
sudo apt install libnss3-toolsnss 3.124-r0
Mozilla Network Security Services
https://developer.mozilla.org/docs/Mozilla/Projects/NSS
sudo apk add nssnss-dev 3.124-r0
Development files for nss
https://developer.mozilla.org/docs/Mozilla/Projects/NSS
sudo apk add nss-devnss-tools 3.124-r0
Tools for the Network Security Services
https://developer.mozilla.org/docs/Mozilla/Projects/NSS
sudo apk add nss-toolsnspr 4.39-1.fc45
Netscape Portable Runtime
http://www.mozilla.org/projects/nspr/
sudo dnf install nsprnspr-devel 4.39-1.fc45
Development libraries for the Netscape Portable Runtime
http://www.mozilla.org/projects/security/pki/nss/
sudo dnf install nspr-develnss 3.124.0-1.fc45
Network Security Services
http://www.mozilla.org/projects/security/pki/nss/
sudo dnf install nssnss-devel 3.124.0-1.fc45
Development libraries for Network Security Services
http://www.mozilla.org/projects/security/pki/nss/
sudo dnf install nss-develnss-pkcs11-devel 3.124.0-1.fc45
Development libraries for PKCS #11 (Cryptoki) using NSS
http://www.mozilla.org/projects/security/pki/nss/
sudo dnf install nss-pkcs11-develnss-softokn 3.124.0-1.fc45
Network Security Services Softoken Module
http://www.mozilla.org/projects/security/pki/nss/
sudo dnf install nss-softoknQuellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.