Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ubuntu: Chrome/Firefox CA certificate improvements #75

Open
defunctl opened this issue Jul 28, 2021 · 0 comments
Open

Ubuntu: Chrome/Firefox CA certificate improvements #75

defunctl opened this issue Jul 28, 2021 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@defunctl
Copy link
Collaborator

Need to add some additional automation for Debian/Ubuntu systems.

Chrome uses $HOME/.pki/nssdb on Ubuntu for certificates.

Firefox uses a random string path: ~/.mozilla/firefox/${RANDOM PROFILE}.default-release

Need the certutil binary: sudo apt install libnss3-tools

For Chrome:

  1. Tell the user to shut down all Chrome instances
  2. certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n tribe -i /usr/local/share/ca-certificates/tribeCA.crt

For Firefox:

  1. Tell the user to shut down all Firefox instances
  2. Get Firefox profile directory: find ~/.mozilla/firefox -name "cert9.db" | xargs dirname
  3. Something like this should work: certutil -d sql:$(find ~/.mozilla/firefox -name "cert9.db" | xargs dirname) -A -t "C,," -n tribe -i /usr/local/share/ca-certificates/tribeCA.crt
@defunctl defunctl added the enhancement New feature or request label Jul 28, 2021
@defunctl defunctl self-assigned this Jul 28, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant