Avatar for Username

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

I have installed firefox esr 60 and importing my certificates via certutil .exe but certificates are not getting installed

  • 7 replies
  • 2 have this problem
  • 72 views
  • Last reply by siddhika

siddhika
siddhika

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(.

Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert8.db cert8.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt

Trying to import few my certificates to firefox esr 60 via below command script but its not working :(. ---------------------------------------------------------------------------------------------------------------- Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt" FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do ( CD /d "%FFProfDir%\%%i" COPY cert8.db cert8.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt

Chosen solution

Note that Firefox 60 ESR uses cert9.db (SQLite) and not cert8.db (DBM).

Read this answer in context 👍 0

All Replies (7)

cor-el
cor-el
  • Top 25 Contributor
  • Moderator

Chosen Solution

Note that Firefox 60 ESR uses cert9.db (SQLite) and not cert8.db (DBM).

Mike Kaply
Mike Kaply
  • Moderator

Yes, the issue is the rename to cert9.db.

siddhika
siddhika Question owner

yes I already tried with cert9.db but no luck :(


Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert9.db cert9.db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt"

siddhika
siddhika Question owner

I am reading over the internet I guess I have to upgrade my cert8.db to cert9.db

cor-el
cor-el
  • Top 25 Contributor
  • Moderator

You need to tell certutil to use SQLite (sql). You can either do this with the -d parameter and the sql: prefix (-d sql:.) or by creating an environment variable in the cmd or script file file.

  • set NSS_DEFAULT_DB_TYPE=sql
siddhika
siddhika Question owner

Yes by default it takes sql type as dbm.

So manually created system environment variable(set NSS_DEFAULT_DB_TYPE=sql ) and tried to run my batch file still its updating cert8.db file not cert9.db file.

Modified by siddhika

siddhika
siddhika Question owner

Any update??