3 ms·
> * Linux is a challenge because you have to add your certificates to the OS trust store and then each browser has their own trust stores. I could be wrong, bu
by everforward 3y ago
> * Linux is a challenge because you have to add your certificates to the OS trust store and then each browser has their own trust stores.
I could be wrong, but I could have sworn Firefox trusts the OS' certificate store. Maybe it's just been too long since I've done it.
- austin-cheney 3y agoFirefox has its own cert store, even on Windows. You can make it defer to the OS trust store with an option in the about:config.
- everforward 3y agoYeah, I know about that part, but I could have sworn that Firefox on Ubuntu trusts the intersection of it's trust store and the OS trust store (with Firefoxs store having priority). Were you using the package manager packages? I'm a little surprised if the distro packages don't configure Firefox to use the OS trust store. I would not be surprised if the binaries Firefox provides directly don't trust the OS package store. They probably shouldn't, given that the path to the OS trust store is configurable. I think Ubuntu and Fedora use slightly different paths. Seems like a security nightmare to try guessing at what directory has the OS trust store. Better to leave it to the package maintainers to specifically customize it for their distro's patterns.