Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #953026

Bug#926388: let Firefox trust /etc/ssl/certs/ca-certificates.crt

From Wolfgang Schweer <w.schweer@gmx.de>
Newsgroups linux.debian.bugs.dist
Subject Bug#926388: let Firefox trust /etc/ssl/certs/ca-certificates.crt
Date 2019-04-04 17:30 +0200
Message-ID <xJctr-31s-1@gated-at.bofh.it> (permalink)
References (1 earlier) <xJ7WN-bb-9@gated-at.bofh.it> <xJ9OW-1kN-11@gated-at.bofh.it> <xJahX-1KI-1@gated-at.bofh.it> <xJ7WN-bb-9@gated-at.bofh.it> <xJahX-1KI-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Thu, Apr 04, 2019 at 01:03:50PM +0000, Mike Gabriel wrote:
> Feel free to keep this bug open for bullseye, so we can re-discuss this
> approach or close it.

Yes, let's consider this for bullseye.

Just for the record:

[ pkcs11.txt ]
On a 64-bit PC Buster system this is working ok:
> library=/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so
> name=PKCS#11 Trust Module
> NSS=trustOrder=100

To get it working for a mixed 64-bit / 32-bit setup this content 
seems to work:
library=/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so
library=/usr/lib/i386-linux-gnu/pkcs11/p11-kit-trust.so
name=PKCS#11 Trust Module
NSS=trustOrder=100

For already existing accounts:

[ Firefox-ESR ]
Checking the existence and then removing 
~/.mozilla/firefox/debian-edu.default/{cert8.db,key3.db,cert9.db,key4.db}
after replacing the exsting pkcs11.txt file seems to work.

[ Thunderbird ]
Similar to Firefox-ESR; location:
~/.thunderbird/debian-edu.default/{cert8.db,key3.db,cert9.db,key4.db}

[ Chromium, Konqueror, and others using PKI ]
Check the existence and then remove
~/.pki/{cert9.db,key4.db}
after replacing the exsting pkcs11.txt file


Wolfgang

Back to linux.debian.bugs.dist | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#926388: let Firefox trust /etc/ssl/certs/ca-certificates.crt Mike Gabriel <mike.gabriel@das-netzwerkteam.de> - 2019-04-04 12:40 +0200
  Bug#926388: let Firefox trust /etc/ssl/certs/ca-certificates.crt Wolfgang Schweer <w.schweer@gmx.de> - 2019-04-04 14:40 +0200
    Bug#926388: let Firefox trust /etc/ssl/certs/ca-certificates.crt Mike Gabriel <mike.gabriel@das-netzwerkteam.de> - 2019-04-04 15:10 +0200
      Bug#926388: let Firefox trust /etc/ssl/certs/ca-certificates.crt Wolfgang Schweer <w.schweer@gmx.de> - 2019-04-04 17:30 +0200
        Bug#926388: let Firefox trust /etc/ssl/certs/ca-certificates.crt Mike Gabriel <mike.gabriel@das-netzwerkteam.de> - 2019-04-04 23:50 +0200

csiph-web