adminconf/kto-ca-install
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add info for Chromium on Deb-based

Browse Source
This commit is contained in:
Alexandre CATTEAU
2026-02-08 17:19:23 +01:00
parent adb389e58b
commit f1017dacf1
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
README.md
View File

@@ -8,11 +8,20 @@ This repository contains a small setup to automate the delivery of our root cert
#### Installation #### Installation
* `install.sh` copies the certificates to the right location and then reloads the system's certificates (Linux only) * `install.sh` copies the certificates to the right location and then reloads the system's certificates (Linux only)
### Firefox ### Debian-based distros
#### Firefox
On Debian-based distros, the following is required so that Firefox uses system CAs: On Debian-based distros, the following is required so that Firefox uses system CAs:
* go to Firefox Settings -> Privacy & Security -> Security -> Security Devices * go to Firefox Settings -> Privacy & Security -> Security -> Security Devices
* then click "Load" to add a new device pointing to `/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so` * then click "Load" to add a new device pointing to `/usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so`
#### Chromium
On Debian-based distros, the following is required so that Chromium uses system CAs (might be wise to backup the
existing file):
```
ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/x86_64-linux-gnu/libnssckbi.so
```
### Manually import in Kodi ### Manually import in Kodi
In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and In systems where we cannot import our certificate (LibreELEC, Android (TV)), we need to copy `advancedsettings.xml` and
`kto.crt` (renamed to `cacert.pem`) to `$HOME_OF_KODI_USER/.kodi/userdata/`. `kto.crt` (renamed to `cacert.pem`) to `$HOME_OF_KODI_USER/.kodi/userdata/`.