FiloSottile / FiloSottile/mkcert

Installing in Firefox (...) failed on Fedora 37

Open
#529 0 comments 3 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
59.6k
Forks
3.1k
PR merge metrics
No merged PRs in 30d

Description

## Environment

* Operating system (including version): Fedora 37
* mkcert version (from `mkcert -version`): 1.4.4
* Server (where the certificate is loaded): N/A
* Client (e.g. browser, CLI tool, or script): N/A

## What you did

`mkcert -install`

## What went wrong

The local CA is correctly installed in the system store, but it's not possible to install for the browser.

```
The local CA is now installed in the system trust store! ⚡️
Installing in Firefox and/or Chrome/Chromium failed. Please report the issue with details about your environment at https://github.com/FiloSottile/mkcert/issues/new 👎
Note that if you never started Firefox and/or Chrome/Chromium, you need to do that at least once.
```

## Some investigation

After digging a bit into the code and verifyng the `~/.pki/nssdb/cert9.db` NSS db exists, I tried running
```
certutil -L -d sql:/home/mbolis/.pki/nssdb/cert9.db
```
and got an error
```
certutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.
```

At this point I tried
```
certutil -L -d /home/mbolis/.pki/nssdb
```
and indeed the result is positive. It actually looks like the "mkcert development CA" was in fact created.

Hoe this helps

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.