Search code examples
firefoxsslxulrunner

Root authority in xulRunner


I need to embed my own Trusted Root Authority for SSL connections in my XulRunner app.
Unfortunatelly I can't find how to do this...
cert_override.txt can't help my because I don't know all the server links nor all the
certificates that must be accepted, but they are signed by the corporate authority..

Solution

  • You cannot change the "built-in" authorities because they are compiled into nssckbi.dll. Unless you use a custom XULRunner build of course and change its source code.

    You can add a new authority to the user profile however, the relevant file is cert8.db. You could use Firefox to add a new root certificate (Options / Advanced / Encryption / View certificates / Authorities / Import) and then take the resulting cert8.db file for your XULRunner profile. You can add it to the default profile - copy it into the defaults/profile directory of your application.