HOWTO__Deploy a new certificate in Firefox

Added by Gene Wood, last edited by Gene Wood on Apr 04, 2009

How to get certutil

http://straxus.javadevelopersjournal.com/creating_a_mozillafirefox_drag_and_drop_file_upload_script_p_1.htm

Where to get certutil

ftp://ftp.mozilla.org/pub/mozilla.org/nspr/releases/v4.4.1/WINNT5.0_OPT.OBJ/ ftp://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_10_RTM/WINNT4.0_OPT.OBJ/

What to do with NSPR and NSS after they're downloaded

Combine the contents of the "lib" directories and "bin" directories of both releases into one directory

How to use it to add a CA cert to an existing firefox profile

http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html

Here is example batch code to do it in Windows XP

FOR /F "tokens=*" %%A IN ('dir /B %APPDATA%\Mozilla\Firefox\Profiles*.default') DO set FIREFOX_PROFILE_DIR=%%A
SET CERTDIR=%FIREFOX_PROFILE_DIR:\=/%
certutil.exe -A -n examplerootca -t "CT,C,C" -d "%CERTDIR%" -i examplerootca.crt

Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.

Comments (1)

 

  1. Jun 04, 2009

    Anonymous says:

    Thank you, incredibly helpful.

    Thank you, incredibly helpful.