Need to add some additional automation for Debian/Ubuntu systems.
Chrome uses $HOME/.pki/nssdb on Ubuntu for certificates.
Firefox uses a random string path: ~/.mozilla/firefox/${RANDOM PROFILE}.default-release
Need the certutil binary: sudo apt install libnss3-tools
For Chrome:
- Tell the user to shut down all Chrome instances
certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n tribe -i /usr/local/share/ca-certificates/tribeCA.crt
For Firefox:
- Tell the user to shut down all Firefox instances
- Get Firefox profile directory:
find ~/.mozilla/firefox -name "cert9.db" | xargs dirname
- Something like this should work:
certutil -d sql:$(find ~/.mozilla/firefox -name "cert9.db" | xargs dirname) -A -t "C,," -n tribe -i /usr/local/share/ca-certificates/tribeCA.crt
Need to add some additional automation for Debian/Ubuntu systems.
Chrome uses
$HOME/.pki/nssdbon Ubuntu for certificates.Firefox uses a random string path:
~/.mozilla/firefox/${RANDOM PROFILE}.default-releaseNeed the certutil binary:
sudo apt install libnss3-toolsFor Chrome:
certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n tribe -i /usr/local/share/ca-certificates/tribeCA.crtFor Firefox:
find ~/.mozilla/firefox -name "cert9.db" | xargs dirnamecertutil -d sql:$(find ~/.mozilla/firefox -name "cert9.db" | xargs dirname) -A -t "C,," -n tribe -i /usr/local/share/ca-certificates/tribeCA.crt