From f1017dacf1d3a013dd0a468ed7f129580fa81efa Mon Sep 17 00:00:00 2001 From: Alexandre CATTEAU Date: Sun, 8 Feb 2026 17:19:23 +0100 Subject: [PATCH] Add info for Chromium on Deb-based --- README.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index c6706a1..4a30845 100644 --- a/README.md +++ b/README.md @@ -8,11 +8,20 @@ This repository contains a small setup to automate the delivery of our root cert #### Installation * `install.sh` copies the certificates to the right location and then reloads the system's certificates (Linux only) -### Firefox +### Debian-based distros + +#### Firefox On Debian-based distros, the following is required so that Firefox uses system CAs: * go to Firefox Settings -> Privacy & Security -> Security -> Security Devices * then click "Load" to add a new device pointing to `/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so` +#### Chromium +On Debian-based distros, the following is required so that Chromium uses system CAs (might be wise to backup the +existing file): +``` +ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/x86_64-linux-gnu/libnssckbi.so +``` + ### Manually import in Kodi In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and `kto.crt` (renamed to `cacert.pem`) to `$HOME_OF_KODI_USER/.kodi/userdata/`.