security.osclientcerts.autoload in FIrefox 68.9.0
Hi.
I have a problem using the p12 certificates stored in Windows. security.osclientcerts.autoload is set in the registry under CU and LM under \SOFTWARE\Policies\Mozilla\Firefox\Preferences >>"security.osclientcerts.autoload"=dword:00000001 When checking about:config it's also set to true. The good thing: The certificates show up in Firefox version 77.0.1, where the certificates are listed. The bad thing: as standard browser we use is Firefox ESR version 68.9.0, where the certificates are not listed.
What I have seen by now security.osclientcerts.autoload has been implemented in ESR version 68.4.x .... is that the only version oder also for newer ones ?
And if also for newer ones, what could be the problem,.... and / or the solution for this problem ?
Appreciate for your help.
Kind regards Tom
Chosen solution
We were unable to back port osclient certs to Firefox 68. The Firefox 78 ESR will be out soon and will have this functionality.
You could theoretically take the osclientcerts.dll from Firefox 77 and use policy to add that DLL as a new security device and it should work on Firefox 68.
Read this answer in context 👍 1All Replies (6)
Chosen Solution
We were unable to back port osclient certs to Firefox 68. The Firefox 78 ESR will be out soon and will have this functionality.
You could theoretically take the osclientcerts.dll from Firefox 77 and use policy to add that DLL as a new security device and it should work on Firefox 68.
Hi Mike,
thanks for your answer. I copied the osclientcerts DLL from Firefox 77 to the root of firefox 68esr and added module manually to 68esr. This worked fine - the certificates are now listed in firefox 68esr and working. To avoid adding the cryptography module manually on each firefox, is there a possibility to load the dll via script,.... batch or powershell or regkey or similar ?
Appriciate for your help. Kind regards Tom
Modified by t.hirtl
You could use the SecurityDevices policy (which boils down to a regkey)
https://github.com/mozilla/policy-templates/blob/master/README.md#securitydevices
Hi again,
is it possible, that security.osclientcerts.autoload doesn't work anymore with version 69.10.0 ? It worked well with 69.9.0 and after the update the Cryptographie module needs to be loaded by hand again.
Kind regards Tom
I assume you mean 68.10.10? Firefox should have preserved the PKCS configuration. It works after you readd it as a security module?
I'm going to assume everything is working with 78?