Hi,
I posted my issue on Thunderbird-Enterprise before and Ludovic Hirlimann
sent me here.
I created an own CA and put the cert in cert8.db by GUI in Thunderbird
10 ESR.
As far as I understand it, the way to go is to put the corresponding
cert8.db file in defaults/profile in the program directory. (Which works
for mimetypes.rdf.)
For what I tested it does not work. On a blank profile cert8.db is
always the original file, my CA is never included.
If I copy back cert8.db by hand, the CA is in there. So the file itself
is fine, but it seams to be never used.
What did I do wrong?
Marc
--- Begin Message ---
On 5/4/12 2:40 PM, Marc Patermann wrote:
Timo,
Timo Pietilä schrieb (04.05.2012 13:40 Uhr):
Marc Patermann wrote:
(Stop TB.)
Now I moved the cert8.db file out of the profile directory to
defaults/profile in the programm directory to provide the CA in
every profile right from the start.
If I understood your explanation correctly you are trying to import
cert8.db to existing profile using that trick.
Yes. But a profile where cert8.db is deleted/moved away.
That doesn't work. It copies whatever is in defaults\profile only on
new profiles at the very first start, not after. Mozilla products
don't have any method to import new certs to existing profiles, and
that is one of my pet peeves on the product.
You may be right. But my experience is that not existing file are
recreated if there is a default. I.e. if you remove your mimetypes.rdf
and restart TB, it is recreated from the default. If there is a file
in defaults/profile this is used.
It works for mimetypes.rdf that way.
But I doubleckecked for a blank profile and again the cert8.db is not
used from defaults/profile while mimetypes.rdf is.
Any hint?
It might be built on demand by nss when NSS is initialized by
Thunderbird. You could try to ask on mozilla.dev.crypto and get an
answer from there.
Ludo
--
@lhirlimann on twitter
https://wiki.mozilla.org/Thunderbird:Testing
my photos http://www.flickr.com/photos/lhirlimann/collections/
--- End Message ---
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
