Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Dalšne informacije

Toś ta nitka jo se archiwěrowała. Pšosym stajśo nowe pšašanje, joli trjebaśo pomoc.

How to restore all certificate authorities on a CentOS running Firefox 10?

  • 2 wótegronje
  • 2 matej toś ten problem
  • 6 naglědow
  • Slědne wótegrono wót hzguo

hzguo
hzguo
more options

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back.

I have a few other servers with identical setup, and they did not have this problem.

I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers?

Thank you.

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back. I have a few other servers with identical setup, and they did not have this problem. I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers? Thank you.

Wšykne wótegrona (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Try to rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file.

If that didn't help then remove or rename secmod.db (secmod.db.old) as well.

The build-in root certificates are stored in the libnssckbi.so file in the installation folder.
Best is to do a clean reinstall and remove the current Firefox program folder.

hzguo
hzguo Pšašaŕ
more options

Thanks a lot Cor-el. Following your recommendation I have fixed the problem. libnssckbi.so had wrong permission (400) so I fixed the permission and all CAs are back.