Score:0

CA certificates: import crt for all users so that Chrome recognizes it as a valid

gq flag

Just wondering if someone can help understand if there's a way to import a CA's crt so that it's available to all the users that login on a specific Ubuntu workstation (in this case, we're talking about Chrome/FF recognizing it as a valid CA).

It seems like I'm required to import the crt to the user's nssdb database by using something like this:

certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n "My Homemade CA" -i /path/to/CA/cert.file

But is there a way to use some sort of shared database so that I'll only import it once? I'm guessing that if it's not possible, then I could probably add some sort of script to the user's startup session, but I'm not sure on what's the best strategy.

Thanks.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.