X
Tap here to go to the mobile version of the site.

Support Forum

I have installed firefox esr 60 and importing my certificates via certutil .exe but certificates are not getting installed

Posted

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(.


Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert8.db cert8.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(. ---------------------------------------------------------------------------------------------------------------- Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt" FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do ( CD /d "%FFProfDir%\%%i" COPY cert8.db cert8.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt

Chosen solution

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 18.9.20044
  • Citrix Receiver Plugin (Win32)
  • Citrix URL-Redirection Helper Plugin
  • Intel web components updater - Installs and updates the Intel web components
  • Intel web components for Intel® Identity Protection Technology
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 11.112.2 for Mozilla browsers
  • Office Authorization plug-in for NPAPI browsers
  • The plugin allows you to have a better experience with Microsoft SharePoint
  • Shockwave Flash 29.0 r0
  • Adobe Shockwave for Director Netscape plug-in, version 12.2.9.199
  • 5.1.50907.0
  • VMware Remote Console Plug-in

Application

  • Firefox 52.7.3
  • User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0
  • Support URL: https://support.mozilla.org/1/firefox/52.7.3/WINNT/en-US/

Extensions

  • Application Update Service Helper 2.0 (aushelper@mozilla.org)
  • Multi-process staged rollout 1.10 (e10srollout@mozilla.org)
  • Pocket 1.0.5 (firefox@getpocket.com)
  • Web Compat 1.0 (webcompat@mozilla.org)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Intel(R) HD Graphics 4000
  • adapterDescription2:
  • adapterDeviceID: 0x0166
  • adapterDeviceID2:
  • adapterDrivers: igdumdim64 igd10iumd64 igd10iumd64 igdumdim32 igd10iumd32 igd10iumd32
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterSubsysID: 21f617aa
  • adapterSubsysID2:
  • adapterVendorID: 0x8086
  • adapterVendorID2:
  • crashGuards: []
  • currentAudioBackend: wasapi
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 10.0.15063.674
  • driverDate: 4-4-2016
  • driverDate2:
  • driverVersion: 10.18.10.4425
  • driverVersion2:
  • featureLog: {u'fallbacks': [], u'features': [{u'status': u'available', u'description': u'Compositing', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'HW_COMPOSITING'}, {u'status': u'available', u'description': u'Direct3D11 Compositing', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'D3D11_COMPOSITING'}, {u'status': u'disabled', u'description': u'Direct3D9 Compositing', u'log': [{u'status': u'disabled', u'message': u'Disabled by default', u'type': u'default'}], u'name': u'D3D9_COMPOSITING'}, {u'status': u'available', u'description': u'Direct2D', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'DIRECT2D'}, {u'status': u'available', u'description': u'Direct3D11 hardware ANGLE', u'log': [{u'status': u'available', u'type': u'default'}], u'name': u'D3D11_HW_ANGLE'}]}
  • info: {u'ApzWheelInput': 1, u'ApzTouchInput': 1, u'AzureFallbackCanvasBackend': u'cairo', u'AzureCanvasAccelerated': 0, u'AzureCanvasBackend': u'direct2d 1.1', u'AzureContentBackend': u'direct2d 1.1'}
  • isGPU2Active: False
  • numAcceleratedWindows: 3
  • numTotalWindows: 3
  • supportsHardwareH264: Yes; Using D3D11 API
  • webgl2Renderer: Google Inc. -- ANGLE (Intel(R) HD Graphics 4000 Direct3D11 vs_5_0 ps_5_0)
  • webglRenderer: Google Inc. -- ANGLE (Intel(R) HD Graphics 4000 Direct3D11 vs_5_0 ps_5_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

Misc

  • User JS: No
  • Accessibility: No
cor-el
  • Top 10 Contributor
  • Moderator
17569 solutions 158915 answers

Chosen Solution

Note that Firefox 60 ESR uses cert9.db (SQLite) and not cert8.db (DBM).

Note that Firefox 60 ESR uses cert9.db (SQLite) and not cert8.db (DBM). *https://blogs.oracle.com/meena/whats-new-in-nss-312-new-shared-dbs *https://wiki.mozilla.org/NSS_Shared_DB
Mike Kaply
  • Moderator
39 solutions 204 answers

Yes, the issue is the rename to cert9.db.

Yes, the issue is the rename to cert9.db.

Question owner

yes I already tried with cert9.db but no luck :(


Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert9.db cert9.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt"

yes I already tried with cert9.db but no luck :( Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt" FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do ( CD /d "%FFProfDir%\%%i" COPY cert9.db cert9.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt"

Question owner

I am reading over the internet I guess I have to upgrade my cert8.db to cert9.db

I am reading over the internet I guess I have to upgrade my cert8.db to cert9.db
cor-el
  • Top 10 Contributor
  • Moderator
17569 solutions 158915 answers

You need to tell certutil to use SQLite (sql). You can either do this with the -d parameter and the sql: prefix (-d sql:.) or by creating an environment variable in the cmd or script file file.

  • set NSS_DEFAULT_DB_TYPE=sql
You need to tell certutil to use SQLite (sql). You can either do this with the -d parameter and the sql: prefix (-d sql:.) or by creating an environment variable in the cmd or script file file. * set NSS_DEFAULT_DB_TYPE=sql

Question owner

Yes by default it takes sql type as dbm.

So manually created system environment variable(set NSS_DEFAULT_DB_TYPE=sql ) and tried to run my batch file still its updating cert8.db file not cert9.db file.

Yes by default it takes sql type as dbm. So manually created system environment variable(set NSS_DEFAULT_DB_TYPE=sql ) and tried to run my batch file still its updating cert8.db file not cert9.db file.

Modified by siddhika

Question owner

Any update??

Any update??