This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Cuireadh an snáithe seo sa chartlann. Cuir ceist nua má tá cabhair uait.

Using certutil, the certificate is not always installed when firefox is open.

RogelioGutierrez
RogelioGutierrez
more options

We are using certutil to install a self signed certificate. When firefox is closed and the command is executed, the certificate is getting installed without problems but when firefox is opened, not always the certificate is installed. Steps: - Check cert with certutil, cert is not there (expected). - Open firefox - Install certificate with certutil. - Check certificate with certutil, certificate is there. - From firefox, view certificates, new certificate is not there. - Check again certificate with certutil, certificate is not there.

Seems that when firefox is opened, the certificate list/db is returned to his previous state.

We are using certutil to install a self signed certificate. When firefox is closed and the command is executed, the certificate is getting installed without problems but when firefox is opened, not always the certificate is installed. Steps: - Check cert with certutil, cert is not there (expected). - Open firefox - Install certificate with certutil. - Check certificate with certutil, certificate is there. - From firefox, view certificates, new certificate is not there. - Check again certificate with certutil, certificate is not there. Seems that when firefox is opened, the certificate list/db is returned to his previous state.

Athraithe ag RogelioGutierrez ar

All Replies (4)

philipp
philipp
  • Moderator
more options

hi RogelioGutierrez, i'm not sure about certutil, but maybe you could try one of the other methods to import your cert: https://mike.kaply.com/2015/02/10/installing-certificates-into-firefox/

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

It is likely that Firefox loads the content on the cert8.db in memory on startup and keeps this data in memory. If you close Firefox then this data is once again saved to the cert8.db file. So if this is the case then you can't update the cert8.db file while Firefox is running.

RogelioGutierrez
RogelioGutierrez Úinéir na ceiste
more options

cor-el dijo

It is likely that Firefox loads the content on the cert8.db in memory on startup and keeps this data in memory. If you close Firefox then this data is once again saved to the cert8.db file. So if this is the case then you can't update the cert8.db file while Firefox is running.

Thanks for your response.

Seems that this is what is happening, we need to find a way to install the certificate when Firefox is closed.

RogelioGutierrez
RogelioGutierrez Úinéir na ceiste
more options

cor-el dijo

It is likely that Firefox loads the content on the cert8.db in memory on startup and keeps this data in memory. If you close Firefox then this data is once again saved to the cert8.db file. So if this is the case then you can't update the cert8.db file while Firefox is running.

Thanks for your response.

These options that you mention looks good!.

From current functionality and design we need to use certutil. We will consider the options that you mention for next releases in order to avoid this behavior.