Conversation

Notices

1. Aral Balkan (aral@mastodon.ar.al)'s status on Thursday, 05-Jan-2023 20:17:19 JST Aral Balkan

   I’m not going to use bloody bugzilla, so if anyone from Mozilla sees this, your enterprise flow for adding certificate authorities (CAs) to Firefox on Linux fails on Fedora Silverblue.

   Since Fedora Silverblue is seen as the possible future of Fedora/Red Hat, you folks might want to talk to the Fedora folks about it and come up with a solution.

   https://github.com/fedora-silverblue/issue-tracker/issues/397

   #mozilla #firefox #fedora #fedoraSilverblue #bug #tls #ssl #redHat #linux #enterprise #certificates

   • Aral Balkan (aral@mastodon.ar.al)'s status on Thursday, 05-Jan-2023 20:37:02 JST Aral Balkan

     in reply to

     • Fedora Project
     • Mozilla
     • LN

     @ln Haha, well you just did (thanks) :)

     (Still not used to corporations and organisations having a presence here.)

     @mozilla @fedora

   • LN (ln@kuma.social)'s status on Thursday, 05-Jan-2023 20:37:03 JST LN

     in reply to

     • Fedora Project
     • Mozilla

     @aral shouldn't you tag them both? Like @mozilla and @fedora

   • Aral Balkan (aral@mastodon.ar.al)'s status on Thursday, 05-Jan-2023 22:30:34 JST Aral Balkan

     in reply to

     Right, there is a way: Here’s how you can add a certificate authority (CA) to Firefox on Linux that also works on Fedora Silverblue: https://github.com/fedora-silverblue/issue-tracker/issues/397#issuecomment-1372211636

     And with that, I don‘t think there’s any other blocker for my rewriting Auto Encrypt Localhost as a mkcert alternative in pure JavaScript for Node.js that doesn’t require certutil or any other binary dependency to be installed.

     🤓👍

     #mozilla #firefox #fedora #fedoraSilverblue #tls #ssl #linux #enterprise #certificates #nodeJS #mkcert

   • Aral Balkan (aral@mastodon.ar.al)'s status on Friday, 06-Jan-2023 04:41:29 JST Aral Balkan

     in reply to

     • Adam Williamson :fedora:

     @adamw Hi Adam, thanks – I’m already adding to the system trust stores (this is for a cross-platform tool so it’s doing that in Linux, macOS, and Windows) but Firefox doesn’t actually pick up custom certificate authorities from there on Linux (on Windows and macOS, you can set a flag to make it do so).

     (Someone from Mozilla is looking into that now so hopefully that might change soon.)

   • Adam Williamson :fedora: (adamw@fosstodon.org)'s status on Friday, 06-Jan-2023 04:41:30 JST Adam Williamson :fedora:

     in reply to

     @aral Please do it this way: https://docs.fedoraproject.org/en-US/quick-docs/using-shared-system-certificates/ . That ought to work fine on Silverblue, I think.