[prev in list] [next in list] [prev in thread] [next in thread] 

List:       olpc-sugar
Subject:    Re: [Sugar-devel] adding a new CA root certificate
From:       Samuel Greenfeld <greenfeld () laptop ! org>
Date:       2013-08-21 18:13:02
Message-ID: CAOC9B=CSEseyWWHHVziRKraYRGikvbozg4KjVWZBygr9MbFw8w () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Unlike Firefox (which has its own PKI and certificate authority support),
Webkit uses the system CA database.

You therefore should add the desired CA to the directory of system CA
certificates, the location of which varies a bit by distribution and
version.

With Fedora 19 (not yet used for a XO laptop release) the new Shared
Systems Certificates feature (
http://fedoraproject.org/wiki/Features/SharedSystemCertificates) also comes
into play.



On Wed, Aug 21, 2013 at 1:22 PM, Jerry Vonau <jvonau@shaw.ca> wrote:

> Hi all:
>
> What steps must I take to install a new root CA certificate so Browse
> can use it? When I click on the hyperlink of the certificate it gets
> downloaded to the journal unlike firefox or older Browse where you are
> prompted.
>
> Thanks for any hints,
>
> Jerry
>
> PS, this is a resend of an email that was sent to sugar-devel &
> olpc-devel, this list doesn't like having 2 email addresses in the "To"
> line.
>
> _______________________________________________
> Devel mailing list
> Devel@lists.laptop.org
> http://lists.laptop.org/listinfo/devel
>

[Attachment #5 (text/html)]

<div dir="ltr"><div>Unlike Firefox (which has its own PKI and certificate authority \
support), Webkit uses the system CA database.<br><br></div>You therefore should add \
the desired CA to the directory of system CA certificates, the location of which \
varies a bit by distribution and version.<br>


<br>With Fedora 19 (not yet used for a XO laptop release) the new Shared Systems \
Certificates feature (<a \
href="http://fedoraproject.org/wiki/Features/SharedSystemCertificates" \
target="_blank">http://fedoraproject.org/wiki/Features/SharedSystemCertificates</a>) \
also comes into play.<br>


<br><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Aug 21, 2013 at \
1:22 PM, Jerry Vonau <span dir="ltr">&lt;<a href="mailto:jvonau@shaw.ca" \
target="_blank">jvonau@shaw.ca</a>&gt;</span> wrote:<br> <blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div>Hi all:<br> <br>
What steps must I take to install a new root CA certificate so Browse<br>
</div>can use it? When I click on the hyperlink of the certificate it gets<br>
<div>downloaded to the journal unlike firefox or older Browse where you are<br>
prompted.<br>
<br>
Thanks for any hints,<br>
<br>
Jerry<br>
<br>
</div>PS, this is a resend of an email that was sent to sugar-devel &amp;<br>
olpc-devel, this list doesn&#39;t like having 2 email addresses in the \
&quot;To&quot;<br> line.<br>
<div><div><br>
_______________________________________________<br>
Devel mailing list<br>
<a href="mailto:Devel@lists.laptop.org" \
target="_blank">Devel@lists.laptop.org</a><br> <a \
href="http://lists.laptop.org/listinfo/devel" \
target="_blank">http://lists.laptop.org/listinfo/devel</a><br> \
</div></div></blockquote></div><br></div></div>



_______________________________________________
Sugar-devel mailing list
Sugar-devel@lists.sugarlabs.org
http://lists.sugarlabs.org/listinfo/sugar-devel


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic