# Installer nss avec Homebrew, apk, dnf, MacPorts, Nix, pacman, apt, zypper

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de nss pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:nss
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install nss
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install nss
```

  Preuve: MacPorts ports tree: net/nss/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add nss
```

  Preuve: Alpine Linux edge package indexes: nss from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install nss
```

  Preuve: Fedora Rawhide package metadata: nss from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#nss
```

  Preuve: nixpkgs package indexes: nss from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

- pacman (92%):

```sh
sudo pacman -S nss
```

  Preuve: Arch Linux sync databases: nss from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz

- Debian apt (92%):

```sh
sudo apt install libnss3
```

  Preuve: Debian stable package indexes: libnss3 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- zypper (92%):

```sh
sudo zypper install mozilla-nss
```

  Preuve: openSUSE Tumbleweed package metadata: mozilla-nss from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## Faits du paquet

- **Clé du paquet:** brew:nss
- **Gestionnaire de paquets:** Homebrew
- **Version:** 3.126
- **Résumé source:** Libraries for security-enabled client and server applications
- **Page d'accueil:** <https://firefox-source-docs.mozilla.org/security/nss/index.html>
- **Dernière mise à jour:** 2026-07-18T01:34:25Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- addbuiltin (alias)
- atob (alias)
- baddbdir (alias)
- bltest (alias)
- btoa (alias)
- certutil (alias)
- chktest (alias)
- cmsutil (alias)
- crlutil (alias)
- dbtest (alias)
- dbtool (alias)
- derdump (alias)
- dertimetest (alias)
- digest (alias)
- ecperf (alias)
- encodeinttest (alias)
- fbectest (alias)
- fipstest (alias)
- httpserv (alias)
- listsuites (alias)
- lowhashtest (alias)
- makepqg (alias)
- mangle (alias)
- modutil (alias)
- multinit (alias)
- nonspr10 (alias)
- nss-config (alias)
- nss-policy-check (alias)
- nssdefaults (alias)
- ocspclnt (alias)
- ocspresp (alias)
- oidcalc (alias)
- p7content (alias)
- p7env (alias)
- p7sign (alias)
- p7verify (alias)
- pk11ectest (alias)
- pk11gcmtest (alias)
- pk11importtest (alias)
- pk11mode (alias)
- pk12util (alias)
- pk1sign (alias)
- pkix-errcodes (alias)
- pp (alias)
- pwdecrypt (alias)
- remtest (alias)
- rsaperf (alias)
- rsapoptst (alias)
- sdbthreadtst (alias)
- sdrtest (alias)
- secmodtest (alias)
- selfserv (alias)
- shlibsign (alias)
- signtool (alias)
- signver (alias)
- ssltap (alias)
- strsclnt (alias)
- symkeyutil (alias)
- tstclnt (alias)
- validation (alias)
- vfychain (alias)
- vfyserv (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 3.126
## Historique du projet et usages

NSS, Network Security Services, is Mozilla's C library set for TLS, PKI, S/MIME, X.509 certificates, PKCS standards, and related crypto/security tasks. It descends from Netscape's browser and server security code and remains a major non-OpenSSL security stack.

### Historique du projet

Mozilla's archived NSS history says the code began as the base security code in the original Netscape Navigator products: Navigator 1.0 supported SSL 2.0, Navigator 2.0 added SSL 3.0 and server-side private-key support, Navigator 3.0 added client authentication, and Communicator 4.0 broke much of the security code into its own NSPR-dependent component.

After Communicator 4.0, the security code began shipping independently. The archived history describes HCL as the first independently buildable security-code line, with NSS 2.0 as the first release fully tested and made available outside Netscape. Firefox Source Docs describes the modern NSS package as MPL-2.0 libraries for security-enabled client and server applications.

### Historique d'adoption

NSS's adoption comes from browsers, mail clients, PKI tooling, and platforms that value its PKCS #11 model and Mozilla root store integration. Mozilla docs say it is used by Mozilla and other companies in Firefox, AOL Instant Messenger, Red Hat server products, and other products; Ubuntu documentation describes it as originally developed by Netscape, inherited by Mozilla, and used mainly in Firefox and Thunderbird on Ubuntu.

On July 1, 2026, Homebrew listed NSS 3.125 with 486,543 installs in its 365-day analytics window and 105,895 installs on request. Unlike NSPR, NSS is both a dependency and a directly requested toolkit because it ships command-line utilities such as `certutil`, `pk12util`, `modutil`, `vfychain`, and `tstclnt`.

### Modes d'utilisation

Developers use NSS when they need Mozilla-compatible TLS/PKI behavior, PKCS #11 modules, certificate/key databases, S/MIME/CMS processing, or command-line certificate database management. The practical package-nerd workflow is often `certutil -d sql:...`, `pk12util`, `modutil`, and `nss-config`, especially when dealing with software that uses NSS databases rather than PEM files directly.

NSS depends on NSPR for cross-platform I/O and threading. Its architecture includes FreeBL, Softoken, CKBI built-in root certificates, certificate/key databases, and SSL/TLS and S/MIME modules, which is why it feels like a complete PKI stack rather than a small crypto primitive library.

### Pourquoi les passionnés de paquets s'y intéressent

NSS is significant because it is the Mozilla security stack: a browser-grade TLS/PKI implementation with command-line tools and a different trust/key storage model from OpenSSL. Packaging it correctly matters for browsers, certificate management, and any software linked against Mozilla's crypto libraries.

### Chronologie

- Navigator 1.0 era: Netscape security code supported SSL 2.0.
- Navigator 2.0 era: SSL 3.0 and server-side private-key support entered the codebase.
- Communicator 4.0 era: security code was partly split into its own NSPR-dependent component.
- NSS 2.0 era: the code became fully tested and available outside Netscape.
- July 1, 2026: Homebrew listed NSS 3.125.

### Related projects

- NSPR provides the portability layer used by NSS.
- Firefox, Thunderbird, and other Mozilla-family software are major NSS consumers.

### Sources

- <https://firefox-source-docs.mozilla.org/security/nss/index.html>
- <https://formulae.brew.sh/formula/nss>
- <https://nss-crypto.org/reference/security/nss/legacy/an_overview_of_nss_internals/index.html>
- <https://nss-crypto.org/reference/security/nss/legacy/faq/index.html>
- <https://nss-crypto.org/reference/security/nss/legacy/overview/index.html>
- <https://ubuntu.com/server/docs/explanation/crypto/network-security-services-nss/>
- <https://www-archive.mozilla.org/projects/security/pki/nss/history>


## Notes de sécurité

Aucun manifest local de gestion des secrets correspondant n'a été trouvé pour nss. Les métadonnées de paquet Nucleus restent publiées ici afin que la couverture future dispose d'une URL stable.


## Autres enregistrements de gestionnaires de paquets

- Debian apt - libnss3 - 2:3.110-1+deb13u3: normalized package name match | Debian stable package indexes: libnss3 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
- Debian apt - libnss3-dev - 2:3.110-1+deb13u3: normalized package name match | Debian stable package indexes: libnss3-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Development files for the Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
- Debian apt - libnss3-tools - 2:3.110-1+deb13u3: normalized package name match | Debian stable package indexes: libnss3-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Network Security Service tools | http://www.mozilla.org/projects/security/pki/nss/tools/
- Nix - nss: normalized package name match | nixpkgs package indexes: nss from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- Ubuntu apt - libnss3 - 2:3.98-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libnss3 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
- Ubuntu apt - libnss3-dev - 2:3.98-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libnss3-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Development files for the Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS
- Ubuntu apt - libnss3-tools - 2:3.98-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libnss3-tools from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Network Security Service tools | http://www.mozilla.org/projects/security/pki/nss/tools/
- apk - nss - 3.125-r0: normalized package name match | Alpine Linux edge package indexes: nss from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Mozilla Network Security Services | https://developer.mozilla.org/docs/Mozilla/Projects/NSS
- apk - nss-dev - 3.125-r0: normalized package name match | Alpine Linux edge package indexes: nss-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Development files for nss | https://developer.mozilla.org/docs/Mozilla/Projects/NSS
- apk - nss-tools - 3.125-r0: normalized package name match | Alpine Linux edge package indexes: nss-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools for the Network Security Services | https://developer.mozilla.org/docs/Mozilla/Projects/NSS
- dnf - nspr - 4.39.0-5.fc45: normalized package name match | Fedora Rawhide package metadata: nspr from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Netscape Portable Runtime | http://www.mozilla.org/projects/nspr/
- dnf - nspr-devel - 4.39.0-5.fc45: normalized package name match | Fedora Rawhide package metadata: nspr-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development libraries for the Netscape Portable Runtime | http://www.mozilla.org/projects/security/pki/nss/
- dnf - nss - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Network Security Services | http://www.mozilla.org/projects/security/pki/nss/
- dnf - nss-devel - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development libraries for Network Security Services | http://www.mozilla.org/projects/security/pki/nss/
- dnf - nss-pkcs11-devel - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss-pkcs11-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development libraries for PKCS #11 (Cryptoki) using NSS | http://www.mozilla.org/projects/security/pki/nss/
- dnf - nss-softokn - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss-softokn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Network Security Services Softoken Module | http://www.mozilla.org/projects/security/pki/nss/


## Combined YAML source

View the package source record on GitHub. [combined/nss.yml](https://github.com/mxcl/pkgdb/blob/main/combined/nss.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
