manuals.c1.fi

Link to this comparison view

--- en:support:fennosys_root_ca:firefox [2018/08/19 04:10]
superadmin
+++ en:support:fennosys_root_ca:firefox [2021/10/03 01:37] (current)
superadmin
@@ Line 1: / Line 1: @@
-==== Installing Fennosys root CA to Firefox ====
+==== Installing Fennosys root CA to Firefox (Linux workstation) ====
-Ensure that you have opened this page with Firefox browser.
+  * Download and save the certificate locally to your computer
+    * https://manuals.c1.fi/certs/Fennosys-PN-CA.crt
-(This notification is here for the people with several Internet browser installed to their system)
+  * Open shell
-  * https://manuals.c1.fi/certs/Fennosys-PN-CA.crt
+  * cd to your firefox profile folder (~/.mozilla/firefox/????????.default*)
-Click the link above. This will open "trust a new CA" dialog which looks something like this:
-<file>
+  * Import CA with certutil cli tool
-You have been asked to trust a new Certificate Authority (CA).
-Do you want to trust "Mozilla Root CA" for the following purposes?
+    $ certutil -d ./  -A -i /usr/local/share/ca-certificates/Fennosys-PN-CA.crt -n "FPN CA" -t "TCu,,"
-[*] Trust this CA to identify web sites.
+  * The above will require firefox master password (if one is set! - Same which is used for protecting "Logins and Passwords"):
-[ ] Trust this CA to identify email users.
-[ ] Trust this CA to identify software developers.
-Before trusting this CA for any purpose, you should examine its certificate
+    Enter Password or Pin for "NSS Certificate DB": [enter your ff master passwd]
-and its policy and procedures (if available).
-[VIEW] Examine CA certificate
+  * Check that our cert was installed OK
-</file>
-//SHA256 Fingerprint://
+    $ certutil -d ./ -L -n "FPN CA" | head
-D:DA:07:C8:F2:DE:67:F2:E5:5F:4F:2E:61:7F:0D:FA:78:29:BA:47:69:E1:58:0F:C9:41:29:40:08:15:52:6E
-  - Click "View" to and check that the fingerprint matches the value given above (//SHA256 Fingerprint//)
+  Certificate:
-  - Close the Certificate Viewer and check at the first box ('Trust this CA to identify web sites.')
+    Data:
-  - Press 'OK'. The root CA has now been imported into your Firefox profile!
+        Version: 3 (0x2)
+        Serial Number:
+:c4:ea:e8:f2:05:6c:90:0f
+        Signature Algorithm: PKCS #1 SHA-512 With RSA Encryption
+        Issuer: "E=-,CN=FPN CA,OU=Fennosys private network,O=Fennosys,L=-,ST=
+            -,C=FI"
+        Validity:
+            Not Before: Tue Aug 14 15:03:54 2018
+  * All done! =)

manuals.c1.fi

User Tools

Site Tools

Page Tools