Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

En savoir plus

Enterprise root certs support for firefox in linux

  • 4 réponses
  • 1 a ce problème
  • 10 vues
  • Dernière réponse par mozilladev

more options

I am trying to access sites whose certificates are issued by a local CA in firefox 70 version in RHEL 7 machine. I have added this CA cert to linux system certificate store. But I am not able to access the site and I see MOZILLA_PKIX_ERROR_MITM_DETECTED error in the webpage.

In windows and Mac I was able to make it work by setting the option security.enterprise_roots.enabled to true in preferences file and adding the root cert in system key store. But seems this option is not available in linux.

If I import this certificate manually in firefox UI (Preferences -> Certificate Manager -> Authorities and Import), I was able to access the site. But I am looking for a programatic way or by setting some config changes from code.

I am looking for this option in both RHEL and Ubuntu flavours. (Not sure whether the kernel flavour will make any difference).

Could you please help me in identifying the correct config options or steps to make Firefox trust this certificate.

Thanks

I am trying to access sites whose certificates are issued by a local CA in firefox 70 version in RHEL 7 machine. I have added this CA cert to linux system certificate store. But I am not able to access the site and I see MOZILLA_PKIX_ERROR_MITM_DETECTED error in the webpage. In windows and Mac I was able to make it work by setting the option security.enterprise_roots.enabled to true in preferences file and adding the root cert in system key store. But seems this option is not available in linux. If I import this certificate manually in firefox UI (Preferences -> Certificate Manager -> Authorities and Import), I was able to access the site. But I am looking for a programatic way or by setting some config changes from code. I am looking for this option in both RHEL and Ubuntu flavours. (Not sure whether the kernel flavour will make any difference). Could you please help me in identifying the correct config options or steps to make Firefox trust this certificate. Thanks

Toutes les réponses (4)

more options
more options

Yes, I tried. I created distribution folder in firefox folder, and created policies.json file inside distribution folder with the following content.

{

 "policies": {
   "Certificates": {
     "ImportEnterpriseRoots": true 
     "Install": ["cert1.crt"]
   }
 }

}

and I copied the cert1.crt to the location given for linux, like /usr/lib/mozilla/certificates etc., But still observing the same issue.

Thanks

more options

Did you try to specify the full path to the certificate ?

{
  "policies": {
    "Certificates": {
      "Install": ["cert1.der", "/home/username/cert2.pem"]
    }
  }
}
more options

Yes, I tried that one as well.