adminconf/kto-ca-install
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update README

Browse Source
This commit is contained in:
Alexandre CATTEAU 2025-04-05 19:45:44 +02:00
parent 297babb815
commit ca15d20a79
1 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
README.md
View File

@ -9,12 +9,9 @@ This repository contains a small setup to automate the delivery of our root cert
* `install.sh` copies the certificates to the right location and then reloads the system's certificates (Linux only)
### Firefox
On Debian-based distros, the following is required so that Firefox uses system CAs. We add a diversion in dpkg so that
Firefox upgrades do not override our change.
```
sudo dpkg-divert --divert /usr/lib/firefox/libnssckbi.so.orig --rename --local /usr/lib/firefox/libnssckbi.so
sudo ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/firefox/libnssckbi.so
```
On Debian-based distros, the following is required so that Firefox uses system CAs:
* go to Firefox Settings -> Privacy & Security -> Security -> Security Devices
* then click "Load" to add a new device pointing to `/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so`
### Manually import in Kodi
In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and