On Wed, Apr 27, 2016 at 3:24 PM, Scott Chapin <[email protected]>
wrote:

> I'm curious about this as well - up until FF45 ESR, we bundled certs into
> an extension (via the CCK), but Firefox is now flagging them as unsigned
> and disabling them.
>

You have two choices:

1. Sign the extensions on AMO.
2. Use the CCK2 as an autoConfig which doesn't involve extensions at all
(for adding certificates).

Note that signing the extensions is just a matter of uploading them to AMO
and then immediately downloading them.

There is no review that happens.

Mike Kaply


> I don't want to resort to setting xpinstall.signatures.required = false as
> that kills all signature checking (and we do want that feature).
>
> What's the correct way to provide certs globally?
>
>
> On Wed, Apr 27, 2016 at 12:26 PM, <[email protected]> wrote:
>
>> Hi Team,
>>
>> We are not able to browse any https sites. Enterprise proxy signs
>> certificates for external websites.
>> Adding enterprise certificates manually to FF’s cert store found working.
>>
>> How we can deploy enterprise certificates to all users together?
>> How to troubleshoot why enterprise root certificates are not getting
>> downloaded in FF’s Cert Cache ?
>> There was no changes in FF version but immediately it stopped working, is
>> there any  other dependencies?
>>
>> Regards,
>> *Ram Balachandran*
>> Desk :  (001) 651 780 6483
>>
>>
>>
>>
>> _______________________________________________
>> Enterprise mailing list
>> [email protected]
>> https://mail.mozilla.org/listinfo/enterprise
>>
>> To unsubscribe from this list, please visit
>> https://mail.mozilla.org/listinfo/enterprise or send an email to
>> [email protected] with a subject of "unsubscribe"
>>
>
>
>
> --
> Scott Chapin - Manager, Systems Engineering - Dreamworks Animation, SKG
> [email protected]    818-695-6361
>
>
> _______________________________________________
> Enterprise mailing list
> [email protected]
> https://mail.mozilla.org/listinfo/enterprise
>
> To unsubscribe from this list, please visit
> https://mail.mozilla.org/listinfo/enterprise or send an email to
> [email protected] with a subject of "unsubscribe"
>
_______________________________________________
Enterprise mailing list
[email protected]
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
[email protected] with a subject of "unsubscribe"

Reply via email to