Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

How to restore all certificate authorities on a CentOS running Firefox 10?

  • 2 replies
  • 2 have this problem
  • 6 views
  • Last reply by hzguo

hzguo
hzguo
more options

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back.

I have a few other servers with identical setup, and they did not have this problem.

I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers?

Thank you.

Recently I `yum update`ed my CentOS 6.3 server. I do not recall anything went wrong, suddenly all Firefox certificate authorities are gone. I attempted to `rm -rf ~/.mozilla` to start a new profile, but it does not help. I also attempted to `yum reinstall firefox` but still do not get those certificates back. I have a few other servers with identical setup, and they did not have this problem. I wonder where are all the default certificate authorities stored? Could I copy paste them from my other CentOS servers? Thank you.

All Replies (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Try to rename the cert8.db file in the Firefox profile folder to cert8.db.old or delete the cert8.db file.

If that didn't help then remove or rename secmod.db (secmod.db.old) as well.

The build-in root certificates are stored in the libnssckbi.so file in the installation folder.
Best is to do a clean reinstall and remove the current Firefox program folder.

hzguo
hzguo Question owner
more options

Thanks a lot Cor-el. Following your recommendation I have fixed the problem. libnssckbi.so had wrong permission (400) so I fixed the permission and all CAs are back.