Easiest way to add a cert and user immutable proxy address to firefox

[blackholemac]

I'll keep it simple...the title says it all. I've been asked to get Firefox out to our Mac fleet.

What is the easiest way to deploy the app, our pac file address, the cert for our proxy (and have it be usable in Firefox) and make the proxy settings immutable in Firefox by non admin users? Give my lack of experience with Firefox, the more details about the process the better. If someone knows how to make Firefox use the settings defined in the system keychain and System Preferences that works too.

Thank you in advance,
Blackholemac

[prbsparx · Accepted solution]

If you're doing an initial deployment. CCK2 is probably the safest easiest bet. CCK2 is an extension for Firefox that provides a GUI interface for customizing Firefox. Once you go through the customizations, you can add the files into the Firefox binary, and then deploy the Firefox binary that way to all the Macs.

https://mike.kaply.com/cck2/

[obi-k]

I used @bentoms script to populate the proxy field in System Preferences.

https://macmule.com/2014/12/07/how-to-change-the-automatic-proxy-configuration-url-in-system-preferences-via-a-script/

[blackholemac]

Right now all that seems to do is set the pac file URL for the TCP/IP stack.

While I do wish that Firefox used that well and relied on the proxy cert in the System Keychain, it doesn't seem to. If it did I could use standard MDM settings to define it for the SSID we wish to have proxied. It currently doesn't seem to work that way. Even if it did we need to force Firefox to always use whatever setting is defined there and not have other options such as "No Proxy"

FYI...what we are trying to do works just fine in the Safari browser.

[prbsparx · Accepted solution]

If you're doing an initial deployment. CCK2 is probably the safest easiest bet. CCK2 is an extension for Firefox that provides a GUI interface for customizing Firefox. Once you go through the customizations, you can add the files into the Firefox binary, and then deploy the Firefox binary that way to all the Macs.

https://mike.kaply.com/cck2/

[cdev · Accepted solution]

I'll second CCK2 – Create and save your profile to be auto-deployed as part of Firefox. Greg Neagle even has a full script that integrates CCK2's output into a Firefox build to use with AutoPkgr:

https://github.com/autopkg/gregneagle-recipes/tree/master/Mozilla

[blackholemac]

I marked those suggesting CCK2 as the answer. I had seen CCK2 and tried it but had a bigger of a time getting the autoconfig placed right in the binary. Messed with it more this weekend and got it working to my liking.

Not the world's most Mac-like app for sure, but got it bent to our district's will.

Blackholemac