Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Mulongo oyo etiyamaki na archive. Tuna motuna mosusu soki osengeli na lisalisi

security.osclientcerts.autoload in FIrefox 68.9.0

  • 6 biyano
  • 1 eza na nkokoso oyo
  • 266 views
  • Eyano yasuka ya Mike Kaply

more options

Hi.

I have a problem using the p12 certificates stored in Windows. security.osclientcerts.autoload is set in the registry under CU and LM under \SOFTWARE\Policies\Mozilla\Firefox\Preferences >>"security.osclientcerts.autoload"=dword:00000001 When checking about:config it's also set to true. The good thing: The certificates show up in Firefox version 77.0.1, where the certificates are listed. The bad thing: as standard browser we use is Firefox ESR version 68.9.0, where the certificates are not listed.

What I have seen by now security.osclientcerts.autoload has been implemented in ESR version 68.4.x .... is that the only version oder also for newer ones ?

And if also for newer ones, what could be the problem,.... and / or the solution for this problem ?

Appreciate for your help.

Kind regards Tom

Hi. I have a problem using the p12 certificates stored in Windows. security.osclientcerts.autoload is set in the registry under CU and LM under \SOFTWARE\Policies\Mozilla\Firefox\Preferences >>"security.osclientcerts.autoload"=dword:00000001 When checking about:config it's also set to true. The good thing: The certificates show up in Firefox version 77.0.1, where the certificates are listed. The bad thing: as standard browser we use is Firefox ESR version 68.9.0, where the certificates are not listed. What I have seen by now security.osclientcerts.autoload has been implemented in ESR version 68.4.x .... is that the only version oder also for newer ones ? And if also for newer ones, what could be the problem,.... and / or the solution for this problem ? Appreciate for your help. Kind regards Tom

Solution eye eponami

We were unable to back port osclient certs to Firefox 68. The Firefox 78 ESR will be out soon and will have this functionality.

You could theoretically take the osclientcerts.dll from Firefox 77 and use policy to add that DLL as a new security device and it should work on Firefox 68.

Tanga eyano oyo ndenge esengeli 👍 1

All Replies (6)

more options

Solution eye oponami

We were unable to back port osclient certs to Firefox 68. The Firefox 78 ESR will be out soon and will have this functionality.

You could theoretically take the osclientcerts.dll from Firefox 77 and use policy to add that DLL as a new security device and it should work on Firefox 68.

more options

Hi Mike,

thanks for your answer. I copied the osclientcerts DLL from Firefox 77 to the root of firefox 68esr and added module manually to 68esr. This worked fine - the certificates are now listed in firefox 68esr and working. To avoid adding the cryptography module manually on each firefox, is there a possibility to load the dll via script,.... batch or powershell or regkey or similar ?

Appriciate for your help. Kind regards Tom

Ezalaki modifié na t.hirtl

more options

You could use the SecurityDevices policy (which boils down to a regkey)

https://github.com/mozilla/policy-templates/blob/master/README.md#securitydevices

more options

Hi again,

is it possible, that security.osclientcerts.autoload doesn't work anymore with version 69.10.0 ? It worked well with 69.9.0 and after the update the Cryptographie module needs to be loaded by hand again.

Kind regards Tom

more options

I assume you mean 68.10.10? Firefox should have preserved the PKCS configuration. It works after you readd it as a security module?

more options

I'm going to assume everything is working with 78?