Dear all,
I have to install .p12 file (certificate) issued by local qualified suppler on Ubuntu 12.04/16.04 and 18.04 on nearly 100 PC-s . Certificate will be used primarily with Firefox. Importing certificate in Firefox is not enough!!!
Is there any tutorial/help for installing this type of certificate as a system wide, not only for Firefox???

Thank you at advance,

Tony

First of all, could you please clarify why importing the certificate in Firefox is not enough?

Also, please provide more details about your setup. You see, PKCS #12 usually includes both the public certificate (chain) (that likely should be installed on ~100 PCs) and the private key (that most probably shouldn't). You can extract them with openssl. Another possibility is importing .p12 into Firefox and then exporting the public certificates only (Your Certificates > View... > Details > Export...).

After exporting the certificate (chain) with either method, you'll put it somewhere (I'd recommend /usr/local/share/ca-certificates/) and use update-ca-certificates to make it known to the system.

OTOH, if you want to maintain a pkcs12 keystore on each PC, you should have a look at keytool that comes with Java (package default-jre-headless).

2 members found this post helpful.