如何使用JSS向Firefox添加受信任的证书自适应 [英] How to add a trusted Certificate Autority to Firefox with JSS

问题描述

我想使用JSS和Windows为您的Mozilla Firefox证书存储库添加受信任的证书自动。

I want to add a trusted certificate autority to your Mozilla Firefox certificate repository using JSS and Windows. Somebody knows how to do that?

推荐答案

这里是如何使用JSS 4.3.1！

Here is how to do it with JSS 4.3.1 !

您会在％APPDATA％/ Mozilla / Firefox / Profiles找到您的windows firefox个人资料目录。

You will find your windows firefox profile directory at %APPDATA%/Mozilla/Firefox/Profiles.

将所有需要的本地库放在一个唯一目录中，并在java.library.path中引用此目录，例如：

Be sure to put all needed native libs in a unique directory and references this directory in the java.library.path, example:

-Djava.library.path =C：\ dev \firefox \jss-native
下面是示例代码：

-Djava.library.path="C:\dev\firefox\jss-native" Here is the sample code:

File firefoxProfilesDir = new File(appData + "/Mozilla/Firefox/Profiles");

    boolean firefoxInstalled = firefoxProfilesDir.exists() && firefoxProfilesDir.isDirectory();
    if (!firefoxInstalled) {
        LOG.info("Firefox profiles not found, abort");
        return;
    }

    LOG.info("Firefox profiles found");

    LOG.info("Browsing for firefox profile");

    File[] profilesDir = firefoxProfilesDir.listFiles();
    for (File profileDir : profilesDir) {
        if (!profileDir.isDirectory()) {
            continue;
        }

        LOG.info("Found firefox profile {}", profileDir.getName());

        // Autority
        CertificateFactory certificateFactory = CertificateFactory.getInstance("X.509");
        Certificate rootCertificate = certificateFactory.generateCertificate(Dispatcher.class
                .getResourceAsStream("/certificates/myautoritycert.cer"));

        // Load native libs
        System.loadLibrary("nspr4");
        System.loadLibrary("plc4");
        System.loadLibrary("plds4");
        System.loadLibrary("nssutil3");
        System.loadLibrary("nss3");
        System.loadLibrary("smime3");
        System.loadLibrary("freebl3");
        System.loadLibrary("nssckbi");
        System.loadLibrary("nssdbm3");
        System.loadLibrary("sqlite3");
        System.loadLibrary("ssl3");

        // Initialize mozilla crypto
        CryptoManager.initialize(profileDir.getAbsolutePath());
        CryptoManager manager = CryptoManager.getInstance();
        CryptoToken token = manager.getInternalKeyStorageToken();
        manager.setThreadToken(token);

        // Autority
        X509Certificate cert = manager.importCACertPackage(rootCertificate.getEncoded());
        InternalCertificate certInternal = manager.importCertToPerm(cert , "somealias");
        certInternal.setSSLTrust(InternalCertificate.TRUSTED_CA);

        LOG.info("Certificate {} loaded into firefox profile {}", "somealias", profileDir.getName());

        break;
    }

这篇关于如何使用JSS向Firefox添加受信任的证书自适应的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！