hello,

I found from 
http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html how 
to import our CA (Internal PKI) in firefox3.
Now I want to distribute cert8.db and key3.db to all new users and also 
to current users who already have a profile.
How can I do that ?
When  a user first start  firefox , a profile is create in it's   
~/.mozilla/firefox/y9f0c08g.default, then  cert8.db, key3.db and 
secmod.db are pushed there, but where is the source of these files so 
that I can modify them before they are pushed ? I did notices in linux 
/etc/pki/nssdb, put after changed them , they were not those one pushed 
on a new user mozilla profile :-(
How will I do for current users who already have a profile ?

Better solution will be to set this with autoconfig 
(http://developer.mozilla.org/en/docs/MCD,_Mission_Control_Desktop_AKA_AutoConfig)
 

If there is a preference  (pref.js) directive that set the path to 
cert8.db, I would point it to a central cert8.db on the shared stations !
But from http://preferential.mozdev.org/preferences.html I've only seen 
that preference "security.default_personal_cert" and it  doesn't seem to 
be the correct one :-( .

any help will be greatly appreciated .
Thanks.

PS: I will also have to do that on windows ...
I wrote (In french) a doc on how i've imported our CA in cert8.db :
http://www-public.it-sudparis.eu/~procacci/wiki/bin/view/Documentations/MozillaCertutils
 

_______________________________________________
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to