16
edits
CA/Changing Trust Settings: Difference between revisions
Jump to navigation
Jump to search
→Listing All Non-Default Root Certificate Settings: include the 'sql:' part required for newer Mozilla products which have a cert9.db in SQLite format
(→Restoring the Default Trust Bits for a Single Built-In Root Certificate: syntax highlight) |
(→Listing All Non-Default Root Certificate Settings: include the 'sql:' part required for newer Mozilla products which have a cert9.db in SQLite format) |
||
| Line 111: | Line 111: | ||
Run this command (doing it while the Mozilla application is running is probably unsupported but does not seem to cause problems in practice): | Run this command (doing it while the Mozilla application is running is probably unsupported but does not seem to cause problems in practice): | ||
<syntaxhighlight lang="bash"> | |||
# for older Mozilla products, leave off the 'sql:' part | |||
certutil -d sql:PROFILE_DIR -L | |||
</syntaxhighlight> | |||
where <tt>PROFILE_DIR</tt> is the path to your profile as noted above. | |||
Root certificates will have trust fields of <code>c</code>, indicating a disabled trust bit, or <code>CT</code> or <code>C</code>, indicating an enabled trust bit. For example: | Root certificates will have trust fields of <code>c</code>, indicating a disabled trust bit, or <code>CT</code> or <code>C</code>, indicating an enabled trust bit. For example: | ||