How to restore all certificate authorities on a CentOS running Firefox 10?
Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back.
I have a few other servers with identical setup, and they did not have this problem.
I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers?
Thank you.
Krejt Përgjigjet (2)
Try to rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file.
If that didn't help then remove or rename secmod.db (secmod.db.old) as well.
The build-in root certificates are stored in the libnssckbi.so file in the installation folder.
Best is to do a clean reinstall and remove the current Firefox program folder.
- Firefox 18.0.x: http://www.mozilla.org/en-US/firefox/all.html
Thanks a lot Cor-el. Following your recommendation I have fixed the problem. libnssckbi.so had wrong permission (400) so I fixed the permission and all CAs are back.