Marketplace/Reviewers/Apps/InstallingReviewerCerts

Packaged App installation requires adding additional certificates to the phone because the app package is only signed for public installation after it is approved via the Reviewer Tools. When an app is installed via the Reviewer Tools prior to approval it is signed with a separate, Reviewer only, certificate which does not come installed on the device by default.

You need to git clone (or manually download) the contents of the Marketplace Certs repository. There is a detailed readme available though in short the procedure for installing reviewer certs is below:

1. git clone (or manually download) https://github.com/briansmith/marketplace-certs
   1. git clone git://github.com/briansmith/marketplace-certs.git
2. Install the Android SDK (for ADB mainly) and make sure $ADT/sdk/platform-tools is on your path
3. Install NSS Tools
   1. Debian/Ubuntu: sudo apt-get install libnss3-tools
   2. Fedora : su -c "yum install nss-tools"
   3. openSUSE : sudo zypper install mozilla-nss-tools
   4. Windows:
      1. hg clone https://hg.mozilla.org/projects/nspr
      2. hg clone https://hg.mozilla.org/projects/nss
      3. cd nss
      4. OS_TARGET=WIN95 make nss_build_all
      5. cd ..
      6. export NSS=$PWD/dist/WIN954.0_DBG.OBJ
      7. # NSS/bin must be ahead of the rest of the path because NSS and Windows both have tools called "certutil".
      8. export PATH=$NSS/bin:$NSS/lib:$PATH
4. To build the new certs:
   1. rm -Rf certdb.tmp
   2. ./new_certdb.sh certdb.tmp
   3. ./add_or_replace_root_cert.sh certdb.tmp root-ca-reviewers-marketplace
5. if you want -dev support too do:
   1. ./add_or_replace_root_cert.sh certdb.tmp marketplace-dev-public-root
   2. ./add_or_replace_root_cert.sh certdb.tmp marketplace-dev-reviewers-root
   3. ./change_trusted_servers.sh full_unagi "https://marketplace-dev.allizom.org,https://marketplace.firefox.com"
6. And finally:
   1. ./push_certdb.sh full_unagi certdb.tmp

Note: For Keon phones, you need replace full_unagi with full_keon, if you have a different FirefoxOS phone, replace full_unagi with the ones from your phone listed in adb.

If you're lucky you might be able to persuade someone who already has NSS installed to create the certdb.tmp folder, patch it with reviewer cert access, and email it to you :) If so you only need to complete step 1 (get the git repo) and the last step to push the certdb.tmp contents to the device!