# nss mit Homebrew, apk, dnf, MacPorts, Nix, pacman, apt, zypper installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für nss in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:nss ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install nss ``` Evidenz: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install nss ``` Evidenz: MacPorts ports tree: net/nss/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add nss ``` Evidenz: Alpine Linux edge package indexes: nss from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install nss ``` Evidenz: Fedora Rawhide package metadata: nss from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#nss ``` Evidenz: nixpkgs package indexes: nss from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S nss ``` Evidenz: Arch Linux sync databases: nss from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz - Debian apt (92%): ```sh sudo apt install libnss3 ``` Evidenz: Debian stable package indexes: libnss3 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - zypper (92%): ```sh sudo zypper install mozilla-nss ``` Evidenz: openSUSE Tumbleweed package metadata: mozilla-nss from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Paketfakten - **Paketschlüssel:** brew:nss - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 3.126 - **Quellzusammenfassung:** Libraries for security-enabled client and server applications - **Homepage:** - **Upstream-Dokumentation:** - **Lizenz:** MPL-2.0 - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-07-18T01:34:25Z - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - addbuiltin (cli) - atob (cli) - baddbdir (cli) - bltest (cli) - btoa (cli) - certutil (cli) - chktest (cli) - cmsutil (cli) - crlutil (cli) - dbtest (cli) - dbtool (cli) - derdump (cli) - dertimetest (cli) - digest (cli) - ecperf (cli) - encodeinttest (cli) - fbectest (cli) - fipstest (cli) - httpserv (cli) - listsuites (cli) - lowhashtest (cli) - makepqg (cli) - mangle (cli) - modutil (cli) - multinit (cli) - nonspr10 (cli) - nss-config (cli) - nss-policy-check (cli) - nssdefaults (cli) - ocspclnt (cli) - ocspresp (cli) - oidcalc (cli) - p7content (cli) - p7env (cli) - p7sign (cli) - p7verify (cli) - pk11ectest (cli) - pk11gcmtest (cli) - pk11importtest (cli) - pk11mode (cli) - pk12util (cli) - pk1sign (cli) - pkix-errcodes (cli) - pp (cli) - pwdecrypt (cli) - remtest (cli) - rsaperf (cli) - rsapoptst (cli) - sdbthreadtst (cli) - sdrtest (cli) - secmodtest (cli) - selfserv (cli) - shlibsign (cli) - signtool (cli) - signver (cli) - ssltap (cli) - strsclnt (cli) - symkeyutil (cli) - tstclnt (cli) - validation (cli) - vfychain (cli) - vfyserv (cli) - addbuiltin (Alias) - atob (Alias) - baddbdir (Alias) - bltest (Alias) - btoa (Alias) - certutil (Alias) - chktest (Alias) - cmsutil (Alias) - crlutil (Alias) - dbtest (Alias) - dbtool (Alias) - derdump (Alias) - dertimetest (Alias) - digest (Alias) - ecperf (Alias) - encodeinttest (Alias) - fbectest (Alias) - fipstest (Alias) - httpserv (Alias) - listsuites (Alias) - lowhashtest (Alias) - makepqg (Alias) - mangle (Alias) - modutil (Alias) - multinit (Alias) - nonspr10 (Alias) - nss-config (Alias) - nss-policy-check (Alias) - nssdefaults (Alias) - ocspclnt (Alias) - ocspresp (Alias) - oidcalc (Alias) - p7content (Alias) - p7env (Alias) - p7sign (Alias) - p7verify (Alias) - pk11ectest (Alias) - pk11gcmtest (Alias) - pk11importtest (Alias) - pk11mode (Alias) - pk12util (Alias) - pk1sign (Alias) - pkix-errcodes (Alias) - pp (Alias) - pwdecrypt (Alias) - remtest (Alias) - rsaperf (Alias) - rsapoptst (Alias) - sdbthreadtst (Alias) - sdrtest (Alias) - secmodtest (Alias) - selfserv (Alias) - shlibsign (Alias) - signtool (Alias) - signver (Alias) - ssltap (Alias) - strsclnt (Alias) - symkeyutil (Alias) - tstclnt (Alias) - validation (Alias) - vfychain (Alias) - vfyserv (Alias) ## Abhängigkeiten - nspr ## Von macOS bereitgestellte Bibliotheken - sqlite ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 3.126 - Manager aktualisiert: 2026-07-18 - lokale Daten: OK - Upstream-Repository: https://firefox-source-docs.mozilla.org/security/nss/index.html - Info: Release/tag comparison is only available for GitHub repositories. ## Projektgeschichte und Nutzung NSS, Network Security Services, is Mozilla's C library set for TLS, PKI, S/MIME, X.509 certificates, PKCS standards, and related crypto/security tasks. It descends from Netscape's browser and server security code and remains a major non-OpenSSL security stack. ### Projektgeschichte Mozilla's archived NSS history says the code began as the base security code in the original Netscape Navigator products: Navigator 1.0 supported SSL 2.0, Navigator 2.0 added SSL 3.0 and server-side private-key support, Navigator 3.0 added client authentication, and Communicator 4.0 broke much of the security code into its own NSPR-dependent component. After Communicator 4.0, the security code began shipping independently. The archived history describes HCL as the first independently buildable security-code line, with NSS 2.0 as the first release fully tested and made available outside Netscape. Firefox Source Docs describes the modern NSS package as MPL-2.0 libraries for security-enabled client and server applications. ### Adoptionsgeschichte NSS's adoption comes from browsers, mail clients, PKI tooling, and platforms that value its PKCS #11 model and Mozilla root store integration. Mozilla docs say it is used by Mozilla and other companies in Firefox, AOL Instant Messenger, Red Hat server products, and other products; Ubuntu documentation describes it as originally developed by Netscape, inherited by Mozilla, and used mainly in Firefox and Thunderbird on Ubuntu. On July 1, 2026, Homebrew listed NSS 3.125 with 486,543 installs in its 365-day analytics window and 105,895 installs on request. Unlike NSPR, NSS is both a dependency and a directly requested toolkit because it ships command-line utilities such as `certutil`, `pk12util`, `modutil`, `vfychain`, and `tstclnt`. ### Wie es verwendet wird Developers use NSS when they need Mozilla-compatible TLS/PKI behavior, PKCS #11 modules, certificate/key databases, S/MIME/CMS processing, or command-line certificate database management. The practical package-nerd workflow is often `certutil -d sql:...`, `pk12util`, `modutil`, and `nss-config`, especially when dealing with software that uses NSS databases rather than PEM files directly. NSS depends on NSPR for cross-platform I/O and threading. Its architecture includes FreeBL, Softoken, CKBI built-in root certificates, certificate/key databases, and SSL/TLS and S/MIME modules, which is why it feels like a complete PKI stack rather than a small crypto primitive library. ### Warum Paket-Nerds sich dafür interessieren NSS is significant because it is the Mozilla security stack: a browser-grade TLS/PKI implementation with command-line tools and a different trust/key storage model from OpenSSL. Packaging it correctly matters for browsers, certificate management, and any software linked against Mozilla's crypto libraries. ### Zeitleiste - Navigator 1.0 era: Netscape security code supported SSL 2.0. - Navigator 2.0 era: SSL 3.0 and server-side private-key support entered the codebase. - Communicator 4.0 era: security code was partly split into its own NSPR-dependent component. - NSS 2.0 era: the code became fully tested and available outside Netscape. - July 1, 2026: Homebrew listed NSS 3.125. ### Related projects - NSPR provides the portability layer used by NSS. - Firefox, Thunderbird, and other Mozilla-family software are major NSS consumers. ### Quellen - - - - - - - ## Sicherheitshinweise Für nss wurde kein passendes lokales Secret-Handling-Manifest gefunden. Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat. ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** nss - **Version Scheme:** 0 - **Revision:** 0 - **Conflicts With:** arabica, resty - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Andere Paketmanager-Einträge - Debian apt - libnss3 - 2:3.110-1+deb13u3: normalized package name match | Debian stable package indexes: libnss3 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS - Debian apt - libnss3-dev - 2:3.110-1+deb13u3: normalized package name match | Debian stable package indexes: libnss3-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Development files for the Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS - Debian apt - libnss3-tools - 2:3.110-1+deb13u3: normalized package name match | Debian stable package indexes: libnss3-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Network Security Service tools | http://www.mozilla.org/projects/security/pki/nss/tools/ - Nix - nss: normalized package name match | nixpkgs package indexes: nss from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - libnss3 - 2:3.98-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libnss3 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS - Ubuntu apt - libnss3-dev - 2:3.98-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libnss3-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Development files for the Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS - Ubuntu apt - libnss3-tools - 2:3.98-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libnss3-tools from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Network Security Service tools | http://www.mozilla.org/projects/security/pki/nss/tools/ - apk - nss - 3.125-r0: normalized package name match | Alpine Linux edge package indexes: nss from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Mozilla Network Security Services | https://developer.mozilla.org/docs/Mozilla/Projects/NSS - apk - nss-dev - 3.125-r0: normalized package name match | Alpine Linux edge package indexes: nss-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Development files for nss | https://developer.mozilla.org/docs/Mozilla/Projects/NSS - apk - nss-tools - 3.125-r0: normalized package name match | Alpine Linux edge package indexes: nss-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools for the Network Security Services | https://developer.mozilla.org/docs/Mozilla/Projects/NSS - dnf - nspr - 4.39.0-5.fc45: normalized package name match | Fedora Rawhide package metadata: nspr from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Netscape Portable Runtime | http://www.mozilla.org/projects/nspr/ - dnf - nspr-devel - 4.39.0-5.fc45: normalized package name match | Fedora Rawhide package metadata: nspr-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Development libraries for the Netscape Portable Runtime | http://www.mozilla.org/projects/security/pki/nss/ - dnf - nss - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Network Security Services | http://www.mozilla.org/projects/security/pki/nss/ - dnf - nss-devel - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Development libraries for Network Security Services | http://www.mozilla.org/projects/security/pki/nss/ - dnf - nss-pkcs11-devel - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss-pkcs11-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Development libraries for PKCS #11 (Cryptoki) using NSS | http://www.mozilla.org/projects/security/pki/nss/ - dnf - nss-softokn - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss-softokn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Network Security Services Softoken Module | http://www.mozilla.org/projects/security/pki/nss/ ## Verwandte Links - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/de/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [Documentation packages](https://pkg.so/de/documentation-tools/) - Matched documentation, manual, or publishing metadata. - [nspr](https://pkg.so/de/brew/nspr/) - Runtime dependency declared by Homebrew. - [poppler](https://pkg.so/de/brew/poppler/) - Popular package that depends on this formula. - [qca](https://pkg.so/de/brew/qca/) - Popular package that depends on this formula. - [redwax-tool](https://pkg.so/de/brew/redwax-tool/) - Popular package that depends on this formula. - [libressl](https://pkg.so/de/brew/libressl/) - Shares pkgdb curated category or tags: cli, cryptography, security, tls. - [botan](https://pkg.so/de/brew/botan/) - Shares pkgdb curated category or tags: cli, cryptography, security, tls. - [nettle](https://pkg.so/de/brew/nettle/) - Shares pkgdb curated category or tags: cli, cryptography, security. - [mbedtls](https://pkg.so/de/brew/mbedtls/) - Shares pkgdb curated category or tags: cli, cryptography, security, tls. - [opensc](https://pkg.so/de/brew/opensc/) - Shares pkgdb curated category or tags: cli, cryptography, security. - [aws-lc](https://pkg.so/de/brew/aws-lc/) - Shares pkgdb curated category or tags: cli, cryptography, security, tls. - [rnp](https://pkg.so/de/brew/rnp/) - Shares pkgdb curated category or tags: cli, cryptography, security. - [gnutls](https://pkg.so/de/brew/gnutls/) - Shares pkgdb curated category or tags: cli, cryptography, security, tls. ## Combined YAML source View the package source record on GitHub. [combined/nss.yml](https://github.com/mxcl/pkgdb/blob/main/combined/nss.yml) ## Quellen - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph