Re: Enterprise Deployment of Root Certificates

[Timothy J Miller <tmiller@xxxxxxxxx>]

On Jun 1, 2008, at 9:38 PM, Neil M. wrote:

> Whats the best way to do this so that they are available to all  
> users in
> Firefox/Thunderbird/Mozilla applications?  All I can find is doing  
> it manually, which is problematic when you need to do this for each  
> Mozilla app, for each user.  Same problem as the coolkey module  
> too.  Anyone have any ideas or know something I don't?  Thanks.

Script it.  secmod.db and cert8.db are the same for all NSS-using  
applications, so load one up and copy it around.  secmod.db will only  
need to be modified if the location of libcoolkeypk11.so changes (or  
the system architecture changes) between systems.

This will lose whatever the user has currently customized re: certs  
and security modules.  If you need to preserve that, you're probably  
SoL.

-- Tim

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Coolkey-devel mailing list
Coolkey-devel@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/coolkey-devel