Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Demand certificates firefox.cfg

  • 2 replies
  • 1 has this problem
  • 1 view
  • Last reply by Mike Kaply

TwoBeers07
TwoBeers07
more options

Good morning,


in our autoconfig.js we have set it to use the corresponding firefox.cfg. This also works so far.


Unfortunately we have problems with the import of the certificates (that used to work).


There is some problem with this code: var Cc = Components.classes; var Ci = Components.interfaces; var certdb = Cc["@mozilla.org/security/x509certdb;1"].getService(Ci.nsIX509CertDB); var certdb2 = certdb; try { 

  certdb2 = Cc["@mozilla.org/security/x509certdb;1"].getService(Ci.nsIX509CertDB2);

} catch (e) {}

cert1 = "XYZ....." certdb.addCertFromBase64(cert1, "TCu,TCu,TCu", "");


We get the message 'Configuration file could not be read. Please contact your system administrator'


Regards

Good morning, in our autoconfig.js we have set it to use the corresponding firefox.cfg. This also works so far. Unfortunately we have problems with the import of the certificates (that used to work). There is some problem with this code: var Cc = Components.classes; var Ci = Components.interfaces; var certdb = Cc["@mozilla.org/security/x509certdb;1"].getService(Ci.nsIX509CertDB); var certdb2 = certdb; try { certdb2 = Cc["@mozilla.org/security/x509certdb;1"].getService(Ci.nsIX509CertDB2); } catch (e) {} cert1 = "XYZ....." certdb.addCertFromBase64(cert1, "TCu,TCu,TCu", ""); We get the message 'Configuration file could not be read. Please contact your system administrator' Regards

All Replies (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can check the Browser Console for more detail.

Note that you can use GPO or a policies.json file to import certificates as that is the preferred way in current releases.

https://searchfox.org/mozilla-release/source/browser/components/enterprisepolicies/Policies.jsm#line-290

Mike Kaply
Mike Kaply
  • Moderator
more options

Yes, to reiterate what cor-el said, there are much better ways to do this now.

That being said, if there is some reason you have to do it this way, reach out to me at mkaply AT mozilla.com and send me your file and I'll figure it out,.