-
Notifications
You must be signed in to change notification settings - Fork 1
Ubuntu: Chrome/Firefox CA certificate improvements #75
Copy link
Copy link
Open
Labels
enhancementNew feature or requestNew feature or request
Description
Need to add some additional automation for Debian/Ubuntu systems.
Chrome uses $HOME/.pki/nssdb on Ubuntu for certificates.
Firefox uses a random string path: ~/.mozilla/firefox/${RANDOM PROFILE}.default-release
Need the certutil binary: sudo apt install libnss3-tools
For Chrome:
- Tell the user to shut down all Chrome instances
certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n tribe -i /usr/local/share/ca-certificates/tribeCA.crt
For Firefox:
- Tell the user to shut down all Firefox instances
- Get Firefox profile directory:
find ~/.mozilla/firefox -name "cert9.db" | xargs dirname - Something like this should work:
certutil -d sql:$(find ~/.mozilla/firefox -name "cert9.db" | xargs dirname) -A -t "C,," -n tribe -i /usr/local/share/ca-certificates/tribeCA.crt
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request