Page 1 of 1

[SOLVED] Importing a Firefox Certificate Authority

Published: January 25, 2018 - 09:55
by hasop
Hello,

do you have any ideas on how to enhance the config-for-firefox package to automatically import a CA into Firefox?

Currently, we manually import our .crt file via Certificates > Authorities > Import
with the "Confirm this CA to identify..." option checked.

We could implement a procedure for Firefox users, but if we could use WAPT for this, that would be fantastic.

Thanks in advance

Re: Importing a certificate authority into Firefox

Published: January 25, 2018 - 4:38 PM
by htouvet
Good morning,
To my knowledge, you can't add a global certificate authority for Firefox without recompiling it...
However, it is possible to add it to the user's Firefox profile as long as that profile exists (i.e., Firefox has been launched once by the user).

The tool to use is called NSS Certutil (which is not the same as Microsoft's)
https://developer.mozilla.org/fr/docs/M ... s_certutil

In the Wapt package, during installation you can copy NSS Certutil and the authority certificates into a common directory.
And in the session-setup function, you can import the certificates with the command

Code: Select all

<chemin vers répertoire certutil>\certutil.exe -A -n "<nom du certificat>" -t "C,," -d "<répertoire profil utilisateur firefox>" -i "<chemin vers le certificat>"

Re: Importing a certificate authority into Firefox

Published: January 25, 2018 - 5:02 PM
by hasop
Thank you.
I will investigate this further.