Why don't you use latest addition to Firefox aiming to redirect certificates verification against Microsoft Windows cert store ?

https://www.bechtle-blog.com/home/using-windows-certificate-store-in-mozilla-firefox

Import your root certificate using certutil.exe

Job done.


On 04/07/2017 17:43, Éric Périard wrote:

Hello community,

Opinions on the custom GPO adm template below…

I’ve recently pulled FF ESR from the network because of the annoyance it is to import a certificate (cert8) into each users profile.

I’ve been running ESR for about 2 years but I’m trying to minimize the backend script of my software deployments.

So essentially I looked up that GPO and it has a solution to grab the SSL cert database from a central location and import it into the default user profile AND existing users.

Has anyone experimented with that feature and made it work successfully?

Essentially my ORG does SSL inspection and we have our own network’s certificate has a middleman before it gets out to check validity of the source and to do that we merge our CA into the FF cert8 db.

https://sourceforge.net/projects/firefoxadm/

thanks!

Éric S. Périard
Laboratory Administrator | Administrateur de laboratoire
Canadian Cyber Incident Response Centre | Centre canadien de réponse aux incidents cybernétiques
Public Safety Canada | Sécurité publique Canada
Telephone | Téléphone  1-613-991-3555
eric.peri...@canada.ca <mailto:eric.peri...@canada.ca>| eric.peri...@ccirc-ccric.ca <mailto:eric.peri...@ccirc-ccric.ca> PublicSafety.gc.ca <https://www.publicsafety.gc.ca/cnt/ntnl-scrt/cbr-scrt/ccirc-ccric-en.aspx>| SecuritePublique.gc.ca <https://www.publicsafety.gc.ca/cnt/ntnl-scrt/cbr-scrt/ccirc-ccric-fr.aspx>
Government of Canada | Gouvernement du Canada



_______________________________________________
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise 
or send an email to enterprise-requ...@mozilla.org with a subject of 
"unsubscribe"

--
Alexandre GAUVRIT
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr

_______________________________________________
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Reply via email to