Avatar for Username

Поиск в Поддержке

Избегайте мошенников, выдающих себя за службу поддержки. Мы никогда не попросим вас позвонить, отправить текстовое сообщение или поделиться личной информацией. Сообщайте о подозрительной активности, используя функцию «Пожаловаться».

Learn More

Эта тема была архивирована. Если вам нужна помощь, задайте новый вопрос.

How to restore all certificate authorities on a CentOS running Firefox 10?

  • 2 ответа
  • 2 имеют эту проблему
  • 6 просмотров
  • Последний ответ от hzguo

hzguo
hzguo
more options

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back.

I have a few other servers with identical setup, and they did not have this problem.

I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers?

Thank you.

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back. I have a few other servers with identical setup, and they did not have this problem. I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers? Thank you.

Все ответы (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Try to rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file.

If that didn't help then remove or rename secmod.db (secmod.db.old) as well.

The build-in root certificates are stored in the libnssckbi.so file in the installation folder.
Best is to do a clean reinstall and remove the current Firefox program folder.

hzguo
hzguo Задавший вопрос
more options

Thanks a lot Cor-el. Following your recommendation I have fixed the problem. libnssckbi.so had wrong permission (400) so I fixed the permission and all CAs are back.