Certificates included with browser
I am trying to use a policies.json file to include a certificate for my own website using a certificate stored online, but not locally. Would it be possible to do so using code similar to below: {
"policies": {
"Certificates": {
"ImportEnterpriseRoots": true,
"Install" [
"cert_name",
"http://www.xxxxxxxx.com/xxxxx/xxxxx.der"
]
}
}
}
Any help would be greatly appreciated.
Выбранное решение
If you know the path where Firefox is installed, you can fully qualify the path.
Or you can use this method:
https://mike.kaply.com/2015/02/10/installing-certificates-into-firefox/
to install the certificate with the raw data.
If the certificate is installed in Windows, though, just flipping ImportEnterpriseRoots should work
Прочитайте этот ответ в контексте 👍 0Все ответы (13)
No, we don't support remote installation of certificates.
Ok, is there any place to include the certificate so it is packaged with the browser on install?
Выбранное решение
If you know the path where Firefox is installed, you can fully qualify the path.
Or you can use this method:
https://mike.kaply.com/2015/02/10/installing-certificates-into-firefox/
to install the certificate with the raw data.
If the certificate is installed in Windows, though, just flipping ImportEnterpriseRoots should work
> If you know the path where Firefox is installed, you can fully qualify the path. If I know where Firefox is installed, then I can qualify the path of Firefox? How does that help? Where would I put that?
Thank you!
You can use a fully qualified path in the for the location of the cert:
See:
https://github.com/mozilla/policy-templates/blob/master/README.md#certificates--install
"Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (\\) which means that for UNC paths, you need to escape both (\\\\). If you use group policy, you only need one backslash."
Thank you,
If I do not know the fully qualified path you mentioned:
> Or you can use this method:
https://mike.kaply.com/2015/02/10/installing-certificates-into-firefox/
to install the certificate with the raw data.
It mentions (in the section on autoconfig) that with binary data, it is much more complicated, is it even possible to use binary data with autoconfig files or not at all?
Thank you again!!
> It mentions (in the section on autoconfig) that with binary data, it is much more complicated, is it even possible to use binary data with autoconfig files or not at all?
It's pretty difficult. I would recommend using the base64 representation of the cert.
Thank you.
I decided to use the base64 representation as you suggested, and when I use the function for autoconfig that you linked, I see that the certificate is not loading.
I followed the debugging steps linked to in the chosen solution here: https://support.mozilla.org/en-US/questions/1246747, and I noticed that the observer does not seem to be called at all on install.
Something placed before all that code works, but something placed after or in the first line of the observer function does not.
Do you know why that would be?
Thank you again in advance!
Изменено gtevi
> Do you know why that would be?
When you put the autoconfig info in the autoconfig.js, you also need to add this line:
pref("general.config.sandbox_enabled", false);
Can you see if that helps? If it doesn't I'll try myself and see what's going on.
That seems to have solved the issue, thanks again!
Is a process similar to this possible on firefox for android? Or is this only available on Firefox for desktop?
Only desktop. We don't have any solutions on android.
Ok, thanks