Import Root Certificate into Firefox

[simonep]

My company is now introducing SSL certificates. We have no issue with Safari nor Chrome just Firefox because the certificate needs to be imported into the browser. We are able to create a new package with the Cert our issue is importing the certificate into FF for our existing users. Not only is the profile name dynamic, but if we do replace the db we will be overwriting the user's other certs. Is there a way to find the correct FF user profile and import the certificate into the existing db?

[gregneagle · Accepted solution]

Take a look at CCK2. https://mike.kaply.com/cck2/

[mag]

Mozilla's certutil in NSS would work perfect for this: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil
If you don't want to bother attempting to compile it yourself you can use Macports or Homebrew...

[simonep]

Thank you gregneagle! CCK2 worked like a charm!

[AVmcclint]

Is there a user manual or documentation for CCK2? I clicked on the Download button and all I got was an .xpi file. Now what?

[bpavlov]

That's the latest blog but I think he references his older blog posts which should provide a pretty good guide:
http://www.amsys.co.uk/2015/09/firefox-cck2-and-an-autopkg-recipe/

[bpavlov]

Actually check these links that cover all CCK topics on their site:
http://www.amsys.co.uk/tag/cck/
http://www.amsys.co.uk/tag/cck-2/

This article in particular was pretty good, but I believe things may have changed drastically since it was published due to an update Firefox released that forced certain changes in CCK:
http://www.amsys.co.uk/2014/08/locking-firefox-cck-2/

[skinford]

Is there an actual manual on how to run CCK2? I apologize for asking this question. I downloaded the .XPI but I guess I'm not understanding how to actually run it after unzipping it to add the Firefox certificate?

Thank you to everyone who may respond.

Found my answer, thank you to all.