christian-korneck / firefox_add-certs Goto Github PK

currently add-certs.bat on 64-bit machines looks for a 32-bit firefox installation in %programfiles(x86)%\Mozilla Firefox. However, starting with Firefox 57.0 "Quantum", the Firefox installer installs a 64-bit build of Firefox in %programfiles%\Mozilla Firefox on a 64-bit machine.

https://github.com/christian-korneck/firefox_add-certs/blob/master/add-certs.cmd#L24
and two other lines have a comma at the end -t "cTC,cTC,cTC",

c:\>bin\certutil.exe -H -A
-A              Add a certificate to the database        (create if needed)
   -n cert-name      Specify the nickname of the certificate to add
   -t trustargs      Set the certificate trust attributes:
                          trustargs is of the form x,y,z where x is for SSL, y is for S/MIME,
                          and z is for code signing. Use ,, for no explicit trust.
                          p      prohibited (explicitly distrusted)
                          P      trusted peer
                          c      valid CA
                          T      trusted CA to issue client certs (implies c)
                          C      trusted CA to issue server certs (implies c)
                          u      user cert
                          w      send warning
                          g      make step-up cert
   -f pwfile         Specify the password file
   -d certdir        Cert database directory (default is ~/.netscape)
   -P dbprefix       Cert & Key database prefix
   -a                The input certificate is encoded in ASCII (RFC1113)
   -i input          Specify the certificate file (default is stdin)

I got this message when "MSVCR120.dll missing".
Could you please upload the version without depend on this dll ?

I am using windows 8 and firefox version 47 and I am not able to add cerificate. It compiles successfully without any error?Please provide some solution

Hello Christian,
It can work with 32 bit Firefox, but only 64 bit Firefox can't work succesfull. It can't add CA certificate to only 64 bit Firefox(doesn't have been setuping 32 bit firefox). Maybe certutil.exe adds CA cert to cert8.db, doesn't adds cert9.db. What can i do my CA certificate for to add 64 bit Firefox store. I am waiting your answers. Thanks.
Best regards.
Erbay Aşkın.

Request for feature: Add "--list" to display all active CA certificates.

This is easy to implement and allows to check, if your add operation was sucessfull. It would save people from having to face certutil itself ;-)

You just need to filter out the intermediate certificates that are saved in cert8.db also.