This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

In Firfox ESR 60.0.1 version cert9.db not getting updated

  • 5 replies
  • 2 have this problem
  • 1 view
  • Last reply by siddhika

more options

I have installed firefox esr 60.0.1 version and trying to update cert9.db file. its not getting updated. my cert8.db file is only getting updated. Please help. I have giveNSS_DEFAULT_DB_TYPE=sql value but still its not working.


running below cmd file.


Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt"

FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do (

CD /d "%FFProfDir%\%%i" COPY cert9.db cert9db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt"

I have installed firefox esr 60.0.1 version and trying to update cert9.db file. its not getting updated. my cert8.db file is only getting updated. Please help. I have giveNSS_DEFAULT_DB_TYPE=sql value but still its not working. running below cmd file. ------------------------------------------------------------------------------------------------------------------------- Set FFProfdir=%Appdata%\mozilla\firefox\profiles Set CERTDIR=%TEMP%\CERTIMPORT DIR /A:D /B %FFProfdir% > "%TEMP%\FFProfile.txt" FOR /F "tokens=*" %%i in (%TEMP%\FFProfile.txt) do ( CD /d "%FFProfDir%\%%i" COPY cert9.db cert9db.orig /y For %%x in ("%CERTDIR%\CERTS\*.cer") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . For %%x in ("%CERTDIR%\CERTS\*.crt") do "%CERTDIR%\certutil.exe" -A -n "%%x" -i "%%x" -t "TCu,TCu,TCu" -d . ) DEL /f /q "%Temp%\FFProfile.txt"

All Replies (5)

more options

Try to add the sql: prefix to the -d parameter (-d sql:.)

more options

yes I already tried this option (-d sql:.)

getting an error

function failed:Security library:bad databse

more options

has anyone imported certificates in esr 60.0.1 version?

more options

Did you try with a fresh cert9.db in case the file got corrupted?

more options

my cert.9 db gets automatically created. on first launch. And when I run the above cmd file only cer8.db gets updated. and if I delete cer8.db file and run CMD then new cert8.db gets created and gets updated also.

and if I manually import certificates from Mozilla then cer9.db gets updated. that's means it is not corrupted.