Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

On Monday the 3rd of March, around 5pm UTC (9am PT) users may experience a brief period of downtime while one of our underlying services is under maintenance.

Avatar for Username

Eheka Pytyvõha

Emboyke pytyvõha apovai. Ndorojeruremo’ãi ehenói térã eñe’ẽmondóvo pumbyrýpe ha emoherakuãvo marandu nemba’etéva. Emombe’u tembiapo imarãkuaáva ko “Marandu iñañáva” rupive.

Kuaave

Ko téma oñeñongatúma. Ejapo porandu pyahu eikotevẽramo pytyvõ.

How to restore all certificate authorities on a CentOS running Firefox 10?

  • 2 Mbohovái
  • 2 oguereko ko apañuãi
  • 6 Hecha
  • Mbohovái ipaháva hzguo

hzguo
hzguo
more options

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back.

I have a few other servers with identical setup, and they did not have this problem.

I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers?

Thank you.

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back. I have a few other servers with identical setup, and they did not have this problem. I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers? Thank you.

Opaite Mbohovái (2)

cor-el
cor-el
  • Top 25 Contributor
  • Moderator
more options

Try to rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file.

If that didn't help then remove or rename secmod.db (secmod.db.old) as well.

The build-in root certificates are stored in the libnssckbi.so file in the installation folder.
Best is to do a clean reinstall and remove the current Firefox program folder.

hzguo
hzguo Porandu apoha
more options

Thanks a lot Cor-el. Following your recommendation I have fixed the problem. libnssckbi.so had wrong permission (400) so I fixed the permission and all CAs are back.