nss_revoke.sh

#!/bin/sh

DBPATH=$1
CERTS=$2

echo "Revoking CAs in $DBPATH/cert9.db"

for CERT in $CERTS;do
    # p,p,p: prohibit all use
    certutil -d sql:${DBPATH} -A -n "${CERT}" -t p,p,p -i ${CERT}
done

echo "Done"