Showing questions for topic:
Showing questions tagged:

Installing root CA certificates

I'm stetting up a testing environment. It's a closed environment with no access to the Internet when it's in use. The environment is launched from AWS and consists of an… (read more)

I'm stetting up a testing environment. It's a closed environment with no access to the Internet when it's in use.

The environment is launched from AWS and consists of an Ubuntu 18 desktop and a Ubuntu Server running Apache. The desktop is able to successfully load the website, but with a cert error that the certificate isn't trusted.

When the Ubuntu Desktop launches, it has a fresh install of Firefox, and therefore all the directories in the users home folder are not yet setup for Firefox, including the database where the root CAs are stored.

I'm am able to add the Root CA certificate into the Firefox cert database AFTER the machine fully boots and I run Firefox for the first time. I'm using the 'certutil' package to do this. After I load Firefox, then add the root CA certificate using certutil, I'm able to load the website without error.

I need to add this certificate to the database with the startup shell script for the machine.

Any help is greatly appreciated. Here's the commands I'm using:

  1. copy the CA cert into firefox

export ffcerts=`ls /home/testuser/.mozilla/firefox/ | grep default-release` sudo certutil -A -n "testcert" -t "TC,," -i /home/testuser/certificates/testcertCA.pem -d sql:/home/testuser/.mozilla/firefox/$ffcerts

These commands work perfectly after Firefox is run for the first time. I've even tried adding 'Firefox' (with several different switches) into my startup script without success.

حُلّت Locked المُؤرشفة 3 1741

first of all, do no harm

That is the first line in the Hippocratic Oath. All doctors have to swear to it. All software developers should too. I made the mistake of letting Firefox on KUbuntu upda… (read more)

That is the first line in the Hippocratic Oath. All doctors have to swear to it. All software developers should too.

I made the mistake of letting Firefox on KUbuntu update. It obliterated all my tabs and all my history. There's nothing left. I had a lot of tabs open with intent to use them to update some astronomy instructional activities. I don't know if I'll be able to find them again.

I don't really have a question except to ask: What fresh hell is this? Is it really that hard to just leave things the hell alone? I'm afraid to ever update Firefox again. If everything else wasn't based on Chromium, I'd be out of here.

Also, it looks like something out of Windows 7.

It's all gone. It's a wonder you didn't delete all my bookmarks while you were at it.

حُلّت المُؤرشفة 3 138