# Install nss with Homebrew, apk, dnf, MacPorts, Nix, pacman, apt, zypper Libraries for security-enabled client and server applications. Version 3.126 via Homebrew; verified 2026-07-18. Also installable with debian: sudo apt install libnss3. ## Install ```sh sudo av install brew:nss ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install nss ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install nss ``` Evidence: MacPorts ports tree: net/nss/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add nss ``` Evidence: Alpine Linux edge package indexes: nss from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install nss ``` Evidence: Fedora Rawhide package metadata: nss from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#nss ``` Evidence: nixpkgs package indexes: nss from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S nss ``` Evidence: Arch Linux sync databases: nss from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz - Debian apt (92%): ```sh sudo apt install libnss3 ``` Evidence: Debian stable package indexes: libnss3 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - zypper (92%): ```sh sudo zypper install mozilla-nss ``` Evidence: openSUSE Tumbleweed package metadata: mozilla-nss from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Package facts - **Package key:** brew:nss - **Package manager:** Homebrew - **Version:** 3.126 - **Source summary:** Libraries for security-enabled client and server applications - **Homepage:** - **Last updated:** 2026-07-18T01:34:25Z - **Generated:** 2026-08-03T19:37:03+00:00 ## Executables - addbuiltin (alias) - atob (alias) - baddbdir (alias) - bltest (alias) - btoa (alias) - certutil (alias) - chktest (alias) - cmsutil (alias) - crlutil (alias) - dbtest (alias) - dbtool (alias) - derdump (alias) - dertimetest (alias) - digest (alias) - ecperf (alias) - encodeinttest (alias) - fbectest (alias) - fipstest (alias) - httpserv (alias) - listsuites (alias) - lowhashtest (alias) - makepqg (alias) - mangle (alias) - modutil (alias) - multinit (alias) - nonspr10 (alias) - nss-config (alias) - nss-policy-check (alias) - nssdefaults (alias) - ocspclnt (alias) - ocspresp (alias) - oidcalc (alias) - p7content (alias) - p7env (alias) - p7sign (alias) - p7verify (alias) - pk11ectest (alias) - pk11gcmtest (alias) - pk11importtest (alias) - pk11mode (alias) - pk12util (alias) - pk1sign (alias) - pkix-errcodes (alias) - pp (alias) - pwdecrypt (alias) - remtest (alias) - rsaperf (alias) - rsapoptst (alias) - sdbthreadtst (alias) - sdrtest (alias) - secmodtest (alias) - selfserv (alias) - shlibsign (alias) - signtool (alias) - signver (alias) - ssltap (alias) - strsclnt (alias) - symkeyutil (alias) - tstclnt (alias) - validation (alias) - vfychain (alias) - vfyserv (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-08-03 - Package-manager version: 3.126 ## Project history and usage NSS, Network Security Services, is Mozilla's C library set for TLS, PKI, S/MIME, X.509 certificates, PKCS standards, and related crypto/security tasks. It descends from Netscape's browser and server security code and remains a major non-OpenSSL security stack. ### Project history Mozilla's archived NSS history says the code began as the base security code in the original Netscape Navigator products: Navigator 1.0 supported SSL 2.0, Navigator 2.0 added SSL 3.0 and server-side private-key support, Navigator 3.0 added client authentication, and Communicator 4.0 broke much of the security code into its own NSPR-dependent component. After Communicator 4.0, the security code began shipping independently. The archived history describes HCL as the first independently buildable security-code line, with NSS 2.0 as the first release fully tested and made available outside Netscape. Firefox Source Docs describes the modern NSS package as MPL-2.0 libraries for security-enabled client and server applications. ### Adoption history NSS's adoption comes from browsers, mail clients, PKI tooling, and platforms that value its PKCS #11 model and Mozilla root store integration. Mozilla docs say it is used by Mozilla and other companies in Firefox, AOL Instant Messenger, Red Hat server products, and other products; Ubuntu documentation describes it as originally developed by Netscape, inherited by Mozilla, and used mainly in Firefox and Thunderbird on Ubuntu. On July 1, 2026, Homebrew listed NSS 3.125 with 486,543 installs in its 365-day analytics window and 105,895 installs on request. Unlike NSPR, NSS is both a dependency and a directly requested toolkit because it ships command-line utilities such as `certutil`, `pk12util`, `modutil`, `vfychain`, and `tstclnt`. ### How it is used Developers use NSS when they need Mozilla-compatible TLS/PKI behavior, PKCS #11 modules, certificate/key databases, S/MIME/CMS processing, or command-line certificate database management. The practical package-nerd workflow is often `certutil -d sql:...`, `pk12util`, `modutil`, and `nss-config`, especially when dealing with software that uses NSS databases rather than PEM files directly. NSS depends on NSPR for cross-platform I/O and threading. Its architecture includes FreeBL, Softoken, CKBI built-in root certificates, certificate/key databases, and SSL/TLS and S/MIME modules, which is why it feels like a complete PKI stack rather than a small crypto primitive library. ### Why package nerds care NSS is significant because it is the Mozilla security stack: a browser-grade TLS/PKI implementation with command-line tools and a different trust/key storage model from OpenSSL. Packaging it correctly matters for browsers, certificate management, and any software linked against Mozilla's crypto libraries. ### Timeline - Navigator 1.0 era: Netscape security code supported SSL 2.0. - Navigator 2.0 era: SSL 3.0 and server-side private-key support entered the codebase. - Communicator 4.0 era: security code was partly split into its own NSPR-dependent component. - NSS 2.0 era: the code became fully tested and available outside Netscape. - July 1, 2026: Homebrew listed NSS 3.125. ### Related projects - NSPR provides the portability layer used by NSS. - Firefox, Thunderbird, and other Mozilla-family software are major NSS consumers. ### Sources - - - - - - - ## Security Notes No matching local secret-handling manifest was found for nss. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Other Package-Manager Records - Debian apt - libnss3 - 2:3.110-1+deb13u3: normalized package name match | Debian stable package indexes: libnss3 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS - Debian apt - libnss3-dev - 2:3.110-1+deb13u3: normalized package name match | Debian stable package indexes: libnss3-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Development files for the Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS - Debian apt - libnss3-tools - 2:3.110-1+deb13u3: normalized package name match | Debian stable package indexes: libnss3-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Network Security Service tools | http://www.mozilla.org/projects/security/pki/nss/tools/ - Nix - nss: normalized package name match | nixpkgs package indexes: nss from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - libnss3 - 2:3.98-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libnss3 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS - Ubuntu apt - libnss3-dev - 2:3.98-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libnss3-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Development files for the Network Security Service libraries | https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS - Ubuntu apt - libnss3-tools - 2:3.98-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libnss3-tools from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | Network Security Service tools | http://www.mozilla.org/projects/security/pki/nss/tools/ - apk - nss - 3.125-r0: normalized package name match | Alpine Linux edge package indexes: nss from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Mozilla Network Security Services | https://developer.mozilla.org/docs/Mozilla/Projects/NSS - apk - nss-dev - 3.125-r0: normalized package name match | Alpine Linux edge package indexes: nss-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Development files for nss | https://developer.mozilla.org/docs/Mozilla/Projects/NSS - apk - nss-tools - 3.125-r0: normalized package name match | Alpine Linux edge package indexes: nss-tools from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Tools for the Network Security Services | https://developer.mozilla.org/docs/Mozilla/Projects/NSS - dnf - nspr - 4.39.0-5.fc45: normalized package name match | Fedora Rawhide package metadata: nspr from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Netscape Portable Runtime | http://www.mozilla.org/projects/nspr/ - dnf - nspr-devel - 4.39.0-5.fc45: normalized package name match | Fedora Rawhide package metadata: nspr-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development libraries for the Netscape Portable Runtime | http://www.mozilla.org/projects/security/pki/nss/ - dnf - nss - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Network Security Services | http://www.mozilla.org/projects/security/pki/nss/ - dnf - nss-devel - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development libraries for Network Security Services | http://www.mozilla.org/projects/security/pki/nss/ - dnf - nss-pkcs11-devel - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss-pkcs11-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Development libraries for PKCS #11 (Cryptoki) using NSS | http://www.mozilla.org/projects/security/pki/nss/ - dnf - nss-softokn - 3.126.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: nss-softokn from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Network Security Services Softoken Module | http://www.mozilla.org/projects/security/pki/nss/ ## Combined YAML source View the package source record on GitHub. [combined/nss.yml](https://github.com/mxcl/pkgdb/blob/main/combined/nss.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph