CA/FAQ: Difference between revisions

140 bytes removed ,  14 July 2021
m
updates links
m (added another link)
m (updates links)
Line 123: Line 123:
In some organizations administrators need to configure additional trusted CAs or override the trust settings of CAs on a system wide level, as required by local system environments or corporate deployments. For example, some organizations have their own in-house CA, and need to automate importing their root certificate(s) into NSS on their internal servers.
In some organizations administrators need to configure additional trusted CAs or override the trust settings of CAs on a system wide level, as required by local system environments or corporate deployments. For example, some organizations have their own in-house CA, and need to automate importing their root certificate(s) into NSS on their internal servers.


Here are some resources about this.
Additional Information:
 
* [[CA:AddRootToFirefox|Add a Root Certificate to Firefox]]
* Adding Certificates for Firefox
* Add Certificates to NSS for other applications
** [[CA:AddRootToFirefox | Add any root certificate]]
** [https://addons.mozilla.org/en-us/firefox/addon/cacert-root-certificate/ Add CACert root only]
* Adding Certificates to NSS for other applications
** [https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil certutil] --  a command-line utility that can be used to list, generate, modify, or delete certificates in the NSS root store.
** [https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil certutil] --  a command-line utility that can be used to list, generate, modify, or delete certificates in the NSS root store.
*** [https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools#Tools_Information NSS Tools]
*** [https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools#Tools_Information NSS Tools]
Line 134: Line 131:
** For systems with Fedora and RHEL (6.5 and newer) see the manual page for update-ca-trust (man update-ca-trust)
** For systems with Fedora and RHEL (6.5 and newer) see the manual page for update-ca-trust (man update-ca-trust)
** For systems with Ubuntu/Debian see the manual page for update-ca-certificates
** For systems with Ubuntu/Debian see the manual page for update-ca-certificates
* [https://www.mozilla.org/en-US/about/forums/#dev-tech-crypto Discussion forum] where you can ask questions and get answers from others who have done this
* [https://groups.google.com/a/mozilla.org/g/dev-security-policy Discussion forum] where you can ask questions and get answers from others who have done this
Confirmed users, Administrators
5,526

edits