From e0f2c0950e625636b6d2a493561b2ef972fa49e7 Mon Sep 17 00:00:00 2001 From: Alexandre CATTEAU Date: Sat, 21 Jan 2023 17:40:43 +0100 Subject: [PATCH] Add in README the final solution for Debian-based --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 7d9cbbd..e3b281f 100644 --- a/README.md +++ b/README.md @@ -9,12 +9,12 @@ This repository contains a small setup to automate the delivery of our root cert * `install.sh` copies the certificates to the right location and then reloads the system's certificates (Linux only) ### Firefox -* On Mint, had to use the following so that Firefox uses system CAs: +On Debian-based distros, the following is required so that Firefox uses system CAs. We add a diversion in dpkg so that +Firefox upgrades do not override our change. ``` -sudo mv /usr/lib/firefox/libnssckbi.so /usr/lib/firefox/libnssckbi.so.bak +sudo dpkg-divert --divert /usr/lib/firefox/libnssckbi.so.orig --rename --local /usr/lib/firefox/libnssckbi.so sudo ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/firefox/libnssckbi.so ``` -* Stil unclear: Will this be overwritten at Firefox update? ### Kodi Android Since Android does not allow to import our root certificate, we have to import directly in Kodi: