Avatar for Username

Mozilla サポートの検索

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

詳しく学ぶ

このスレッドはアーカイブに保管されました。 必要であれば新たに質問してください。

thunderbird 68 use of json policy

  • 3 件の返信
  • 1 人がこの問題に困っています
  • 1 回表示
  • 最後の返信者: p.v.malkov

p.v.malkov
p.v.malkov
more options

json policy was added to TB68 https://www.thunderbird.net/en-US/thunderbird/68.0/releasenotes/

For company CA installation I have firefox policy: /usr/share/firefox-esr/distribution/policies.json 

       {
         "policies": {
           "Certificates": {
             "Install": [ "/etc/ca.pem" ]
           }
         }
       }

It works

What is the path for TB policy and filename? mirrored structure did not help /usr/share/thunderbird/distribution/policies.json TB still warnes about certificate

It worked with trick to use system certs, ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/thunderbird/libnssckbi.so with /usr/local/share/ca-certificates && update-ca-certificates and lockPref("security.enterprise_roots.enabled", true);

but better to use new solution

UPD: I checked source. And it is correct, it uses distribution/policies.json But it does not apply niether 

       {
         "policies": {
           "Certificates": {
             "Install": [ "/etc/ca.pem" ]
           }
         }
       }

nor 

       {
         "policies": {
           "Certificates": {
             "ImportEnterpriseRoots": true
           }
         }
       }
json policy was added to TB68 https://www.thunderbird.net/en-US/thunderbird/68.0/releasenotes/ For company CA installation I have firefox policy: /usr/share/firefox-esr/distribution/policies.json { "policies": { "Certificates": { "Install": [ "/etc/ca.pem" ] } } } It works What is the path for TB policy and filename? mirrored structure did not help /usr/share/thunderbird/distribution/policies.json TB still warnes about certificate It worked with trick to use system certs, ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/thunderbird/libnssckbi.so with /usr/local/share/ca-certificates && update-ca-certificates and lockPref("security.enterprise_roots.enabled", true); but better to use new solution UPD: I checked source. And it is correct, it uses distribution/policies.json But it does not apply niether { "policies": { "Certificates": { "Install": [ "/etc/ca.pem" ] } } } nor { "policies": { "Certificates": { "ImportEnterpriseRoots": true } } }

この投稿は p.v.malkov により に変更されました

選ばれた解決策

after FF installation link is created 

       /usr/lib/firefox-esr/distribution --> ../../share/firefox-esr/distribution

check code why TB does not do it I created link manually and bingo, it started working 

       /usr/lib/thunderbird/distribution --> ../../share/thunderbird/distribution
この回答をすべて読む 👍 0

すべての返信 (3)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

Can you install the certificate using the user interface. I am seeing folks with certificates that are simple not suitable either because they are not issues by certifying authorities (self signed in some cases) or are invalid because the provider is not recognized in the CA chain of trust.

p.v.malkov
p.v.malkov 質問者
more options

Manuall installation of cert works fine as well as a mail recieving after. The same action 

       with_items:
       - /usr/share/firefox-esr/distribution/policies.json
       - /usr/share/thunderbird/distribution/policies.json

before installing FF and TB, but different result.

この投稿は p.v.malkov により に変更されました

p.v.malkov
p.v.malkov 質問者
more options

選ばれた解決策

after FF installation link is created 

       /usr/lib/firefox-esr/distribution --> ../../share/firefox-esr/distribution

check code why TB does not do it I created link manually and bingo, it started working 

       /usr/lib/thunderbird/distribution --> ../../share/thunderbird/distribution