I use pk12util to add certs to firefox cert database.  pk12util is part of 
Mozilla’s NSS tools 
(https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools). You 
could use homebrew to get them, but I prefer to compile myself.

 

SCRIPTPATH="$( cd "$(dirname "$0")" ; pwd -P )"

ffProfileShortPath=$(cat $HOME/Library/Application\ 
Support/Firefox/profiles.ini |grep Path |awk -F= '{print $2}'|head -1)

 

fProfileFullPath="$HOME/Library/Application 
Support/Firefox/$ffProfileShortPath/"

"$SCRIPTPATH/pkutil/pk12util" -i newcert.pfx -W "${cert_password}" -d 
"$ffProfileFullPath"

 

Todd

 

From: Enterprise <[email protected]> on behalf of Ben Bass 
<[email protected]>
Date: Wednesday, May 23, 2018 at 12:30 PM
To: enterprise <[email protected]>
Subject: [Mozilla Enterprise] Adding certificates to FF for Mac

 

Hi everyone. 

 

We have been tasked with adding some of our internal Root CA's to allow FireFox 
to use these certificates.  

 

We are still adding the certificates to the keychain, but cannot find a way to 
get FF for mac to use the keychain.  I started down the autoconfig path but see 
that that method will run into issues in FF 62, and we don't want to develop a 
short term solution unless absolutely necessary.

 

So my question is, what is the best way to get Firefox for Mac (ESR or regular 
release) to either use the system keychain, or a way to install/configure the 
certificates via another method?

 

Thank you!
 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Enterprise mailing list
[email protected]
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
[email protected] with a subject of "unsubscribe"

Reply via email to