Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Installing in Firefox (...) failed on Fedora 37 #529

Open
mbolis opened this issue Jun 14, 2023 · 1 comment
Open

Installing in Firefox (...) failed on Fedora 37 #529

mbolis opened this issue Jun 14, 2023 · 1 comment

Comments

@mbolis
Copy link

mbolis commented Jun 14, 2023

Environment

  • Operating system (including version): Fedora 37
  • mkcert version (from mkcert -version): 1.4.4
  • Server (where the certificate is loaded): N/A
  • Client (e.g. browser, CLI tool, or script): N/A

What you did

mkcert -install

What went wrong

The local CA is correctly installed in the system store, but it's not possible to install for the browser.

The local CA is now installed in the system trust store! ⚡️
Installing in Firefox and/or Chrome/Chromium failed. Please report the issue with details about your environment at https://github.com/FiloSottile/mkcert/issues/new 👎
Note that if you never started Firefox and/or Chrome/Chromium, you need to do that at least once.

Some investigation

After digging a bit into the code and verifyng the ~/.pki/nssdb/cert9.db NSS db exists, I tried running

certutil -L -d sql:/home/mbolis/.pki/nssdb/cert9.db

and got an error

certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.

At this point I tried

certutil -L -d /home/mbolis/.pki/nssdb

and indeed the result is positive. It actually looks like the "mkcert development CA" was in fact created.

Hoe this helps

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants
@mbolis and others