We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Hilfe durchsuchen

Vorsicht vor Support-Betrug: Wir fordern Sie niemals auf, eine Telefonnummer anzurufen, eine SMS an eine Telefonnummer zu senden oder persönliche Daten preiszugeben. Bitte melden Sie verdächtige Aktivitäten über die Funktion „Missbrauch melden“.

Weitere Informationen

Dieses Thema wurde archiviert. Bitte stellen Sie eine neue Frage, wenn Sie Hilfe benötigen.

Why can't I add certificates to the default firefox profile?

  • 1 Antwort
  • 3 haben dieses Problem
  • 2 Aufrufe
  • Letzte Antwort von fetju

fetju
fetju
more options

I am using the NSS certutil to add a certificate to users profiles on OS X (10.8-10) running Firefox ESR 31.4.

There is no problem adding the cert to existing users profiles, however I want to add it so that new users who log in will automatically have the cert installed.

As I understand it, I should be able to install the cert to a default profile in the application that will then go out to new users when they run FF for the first time, however this has not been the case in my testing. I have been running the cert util, as root, on the directory '/Applications/Firefox.app/Contents/MacOS/browser/defaults/profile'. The command ('/opt/local/bin/nss-certutil -A -i mycert.cer -n "My Cert" -t "C,," -d "/Applications/Firefox.app/Contents/MacOS/defaults/profile"') runs without error and places three files in there: cert8.db, key3.db, secmod.db

When i log in as a new user on the system however, they do not have the cert. What am I missing?

I am using the NSS certutil to add a certificate to users profiles on OS X (10.8-10) running Firefox ESR 31.4. There is no problem adding the cert to existing users profiles, however I want to add it so that new users who log in will automatically have the cert installed. As I understand it, I should be able to install the cert to a default profile in the application that will then go out to new users when they run FF for the first time, however this has not been the case in my testing. I have been running the cert util, as root, on the directory '/Applications/Firefox.app/Contents/MacOS/browser/defaults/profile'. The command ('/opt/local/bin/nss-certutil -A -i mycert.cer -n "My Cert" -t "C,," -d "/Applications/Firefox.app/Contents/MacOS/defaults/profile"') runs without error and places three files in there: cert8.db, key3.db, secmod.db When i log in as a new user on the system however, they do not have the cert. What am I missing?

Ausgewählte Lösung

Turns out it was a permissions issue, the files created by the certutil in the defaults folder got root only permissions given to them. I opened them up and it's working fine.

Diese Antwort im Kontext lesen 👍 0

Alle Antworten (1)

fetju
fetju Fragesteller
more options

Ausgewählte Lösung

Turns out it was a permissions issue, the files created by the certutil in the defaults folder got root only permissions given to them. I opened them up and it's working fine.