为提升您的使用体验，本站正在维护，部分功能暂时无法使用。如果本站文章无法解决您的问题，您想要向社区提问的话，请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问，我们的支持社区将会很快回复您的疑问。

Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

How to restore all certificate authorities on a CentOS running Firefox 10?

  • 2 个回答
  • 2 人有此问题
  • 6 次查看
  • 最后回复者为 hzguo

hzguo
hzguo
more options

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back.

I have a few other servers with identical setup, and they did not have this problem.

I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers?

Thank you.

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back. I have a few other servers with identical setup, and they did not have this problem. I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers? Thank you.

所有回复 (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Try to rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file.

If that didn't help then remove or rename secmod.db (secmod.db.old) as well.

The build-in root certificates are stored in the libnssckbi.so file in the installation folder.
Best is to do a clean reinstall and remove the current Firefox program folder.

hzguo
hzguo 提问者
more options

Thanks a lot Cor-el. Following your recommendation I have fixed the problem. libnssckbi.so had wrong permission (400) so I fixed the permission and all CAs are back.