Arch Linux

Please read this before reporting a bug:

Do NOT report bugs when a package is just outdated, or it is in Unsupported. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

FS#28588 - [firefox] custom certificate authority

Attached to Project: Arch Linux
Opened by Jakub Bittner (rexcze) - Wednesday, 22 February 2012, 17:00 GMT
Last edited by Allan McRae (Allan) - Saturday, 16 June 2012, 08:57 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Ionut Biru (wonder)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No


I added custom Certificate Authority cert to /usr/share/ca-certificates and run update-ca-certificates, my CA is in /etc/ca-certificates.conf and works with wget, curl.. But doesnt work with Firefox or Chrome, I cant see it. In Debian/Ubuntu it works. Thank you

Pkg versions:
Firefox 10.0.2-1
nss 3.13.1-2
ca-certificates 20120212-1
This task depends upon

Closed by  Allan McRae (Allan)
Saturday, 16 June 2012, 08:57 GMT
Reason for closing:  Upstream
Comment by Pierre Schmitz (Pierre) - Wednesday, 22 February 2012, 17:19 GMT
Firefox does not use the system certificates but has it's own set hard coded and compiled in. If this does work elsewhere this is most likely due to patches we wont add.
Comment by Jakub Bittner (rexcze) - Wednesday, 29 February 2012, 08:34 GMT
I cant find any patches for Firefox, so I made my script. It would by nice to have central cert repository, but you are right, we can not change it. Maybe upstream?