Installing Security Certificates
 

Does anybody know how to install security certificates. I am trying to connect to my schools wifi but need to install the certificate and when I click install it doesnt.

Re: Installing Security Certificates
 

I have also failed installing security certificates on my N9. Certificate manager finds the packages, ask correctly for password for import, then gives me a dialog for use settings. I can not see "Done" button, only back arrow. And I still get "Install" button under the certificate screen, though my certificates show in the installed list.
Anyway when I navigate the browser to web site that uses my certificates I always get notification for it being untrusted(although this is my bank, using Verisgn) and I am neither prompted to select my personal certificate nor it is used automatically. So I can not perform online banking operations with default browser.
The exact same certificates I was able to import in Mozilla and I am using them without any problems. But I prefer the default browser or Opera than the sluggish Mozilla...
Anyone managed to solve this?

Re: Installing Security Certificates
 

Zlatko, how did you managed to install the certificate in Firefox?
I also installed my online bank's certificate in the system but it is not working. The default browser does not work.

Re: Installing Security Certificates
 

installing Mozilla from store(12.01), and then incept the package from i use nighly version , and then downgrading again to fennec from store, its make Mozilla lil bit faster, cmiiw, sorry for OT, :)

Re: Installing Security Certificates
 

@bastyani
I downloaded a plugin for FF called Cert Manager v.1.3, using it I am able to install certificates.
To be honest I do not remember where I downloaded it from.

Re: Installing Security Certificates
 

Thanks for the reply Zlatko! I also have installed the same plugin but when asked to select the certificate only the standard options (Documents/Images/Videos/Music) shows and I cannot select my certificate. How did you managed to select it?

Re: Installing Security Certificates
 

@bastyani
Place the certificate in some of these folders, after changing the extension to .txt so file browser can see it. It will import just fine.

Re: Installing Security Certificates
 

I already tried that but no luck. I used Filebox to place the certificate in /home/user/MyDocs/Documents/ and renamed the file to .txt but that file does not show in the Documents application or when browsing with Firefox for the certificate. Is this the right folder? Or is there another documents folder? Do I have to be in the developer mode? Thanks for help!

Re: Installing Security Certificates
 

@bastyani
Just tried it - yes, folder is correct. Just to confirm: if you have cert file e.g. bastyani.pem you rename it to bastyani.txt? You must for sure see it in your Documents app. Try using search option in Documents app.

Re: Installing Security Certificates
 

Very strange.... I have the "certificate.txt" file in /home/user/MyDocs/Documents/ and if I run the Documents app the only thing I see is "FOSS_notices" file which is comes bundled with the phone. Also the search function does not return any results.
Any ideas?

Re: Installing Security Certificates
 

@bastyani
Try renaming it to .doc or .xls Use the terminal just to copy file with same name and different extensions. Also verify via terminal the file is there. You must see it in Documents app before you can select it in FF plugin.

Re: Installing Security Certificates
 

Terminal shows that the file is really there, but still other apps don't see it. Any other way to select the file for the FF plugin? Something like "Astro" that I used on my Android phone to select files?

Re: Installing Security Certificates
 

Can you try just placing normal .txt there to see if it seen by the Documents App?

Re: Installing Security Certificates
 

Ofcourse you are aware that with incepted device you can install and remove any pem CA's to your device with acmcli command? So you can have your selfsigned CA as trusted etc.

As a hint "acmcli -lc common-ca -L" gives you list of currently installed SSL CA's.

Disclaimer: if you don't know what your doing, then don't touch acmcli command. You have been warned!!!

Re: Installing Security Certificates
 

I even tried to attach a .txt file and sent it to my mail and then downloaded the attachment. The attachment is clearly visible in the Documents folder (in Filebox) but not visible in the Documents app.
As far as the "acmcli" command I really don't know how to use it but as I said I also used the system way of importing my certificate (Settins-Security-Certificates) and it shows that the certificate is imported, but it does not work. I am not sure if Firefox can use the certificates imported in the system or they have to be imported in Firefox as well?

Re: Installing Security Certificates
 

@bastyani
FF can NOT use certificates imported in the system. You seem to have some issue with your tracker updating. That is why you don't see new txt files in your Documents folder. If you resolve issue of document files not displayed in Document app, than you will be able without any problems to import certificate to FF and use it.
Try rebooting your phone.

PS. Do you have issues with files when populating Gallery app?
If you move image to /home/user/MyDocs/DCIM ot Pictures - does it show in Gallery app?

Re: Installing Security Certificates
 

Hi guys! Sorry for this delay, I was very busy at work.
So somehow I managed to install my certificate in Firefox. I guess it was a system problem as my files didn't refresh and I was unable to see my files. Then after a reboot and some gymnastics I successfully imported the certificate in FF. :) Big thanks to everyone, especially to Zlatko for the help. Unfortunately now there's a second problem - in the moment I click on my online bank link (which is https://...) Firefox immediately crashes. :( Any ideas why FF crashes?

Re: Installing Security Certificates
 

@bastyani
Happens to me from time to time as well. But after several attempts it starts to connect OK. Just try several times.

Re: Installing Security Certificates
 

Tried many many times, rebooted phone, FF still crashes each time... :(
Tried both the classic and mobile version of the bank site.
Is there some kind of error/crash log that FF has to check out the problem?

Re: Installing Security Certificates
 

@bastyani
I have tried another cert - got same behavior as you. So it works with certain certs and does not with other. You can try write e-mail to FF support, but I doubt anybody there will care about N9's version.
Lets hope built-in browser security features will be improved in PR1.3.

Re: Installing Security Certificates
 

I feel like repetition in here: built-in browser in PR1.2 works with any certificate that you want if you use acmcli to add CA's (always used commandline, but UI should work too).

For UI to work, you should place the wanted root CA.pem files in /home/user directory and when you select security->certificates->"add new certificate" it should show a list of pem files in /home/user and let you install wanted certs, and then you can choose if if you want that to work with websites/wlan/mail/software.

I just added my self-signed https pages to be fully trusted on my device. And now browser is not warning about untrusted cert anymore, and everything works smoothly.

I don't know how external firefox application handles certs, as I haven't used that application myself.

You should not put your hopes in possible PR releases, as feature freeze for new functionality was already long time ago. But certification UI should work, most people just don't know that the path for imported .pem files is /home/user.

PS. for example for startssl.com certificates to start to work you do: # apt-get install wget; cd /home/user; wget http://www.startssl.com/certs/sub.class1.server.ca.pem; # And then install it from the UI

Re: Installing Security Certificates
 

@rainisto
Check post #2 - it is not finding and installing via GUI the certificate that brings issues. It is that after that this certificate is not used by browser. I can see the certificate package being present in the system by selecting Show>User certificates.
I have trouble with default browser on many web-sites that require secure connection, e.g forum.meego.com.

EDIT: I made mistake - in PR1.2 forum.meego.com can be logged in. My apologies.

Re: Installing Security Certificates
 

please give https url which is not working and the .pem file that you tried to install, so I can try out?

Re: Installing Security Certificates
 

@rainisto
I really appreciate you help here! But all certificates and https urls are my private bank or work, and thus are confidential.
The exact same certificates work as supposed in Mozzila on my Ubuntu and Mandriva lap-tops.
With my online banking I get "untrusted certificate" warning, I proceed and I can log on successfully to my account, but my client certificate is not used and thus I can not perform any banking, only monitor. And there is no way making my browser use the client cert installed in system.
On my work secure url's there is just "Can't open page" notice.

Re: Installing Security Certificates
 

sorry, without examples reachable from internet, I cannot help any further.

Does anyone else have example https sites (hopefully with corresponding .pem file) that they are having problems with?

Re: Installing Security Certificates
 

@rainisto
Just checked using acmcli - all private domains on my N9 are empty. I can not find certs I have installed using GUI. Do you think it will be good idea to try install them using CLI?

I want to try installing my online banking .p12 cert package usin acmcli. As I get it is Do I have to specify domain? And if yes where this certs must go?