Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revision | Next revisionBoth sides next revision |
| kb:cert_override [2020/08/31 15:48] – dstillman | kb:cert_override [2020/09/01 02:44] – dstillman |
|---|
| * **Windows:** Zotero for Windows will automatically use the system root certificate store, which in most cases should allow it to work automatically like other browsers on the system. | * **Windows:** Zotero for Windows will automatically use the system root certificate store, which in most cases should allow it to work automatically like other browsers on the system. |
| * **Mac/Linux**: Zotero is based on Firefox and uses the same certificate mechanism, so you or your IT department will need to configure Firefox for the custom CA in a new Firefox profile and then copy the cert9.db, key4.db, and pkcs11.txt files from the [[http://support.mozilla.com/kb/Profiles|Firefox profile directory]] to the [[profile directory|Zotero profile directory]]. (Prior to Zotero 5.0.78, the cert8.db, key3.db, and secmod.db files from Firefox 52 ESR were required.) | * **Mac/Linux**: Zotero is based on Firefox and uses the same certificate mechanism, so you or your IT department will need to configure Firefox for the custom CA in a new Firefox profile and then copy the cert9.db, key4.db, and pkcs11.txt files from the [[http://support.mozilla.com/kb/Profiles|Firefox profile directory]] to the [[profile directory|Zotero profile directory]]. (Prior to Zotero 5.0.78, the cert8.db, key3.db, and secmod.db files from Firefox 52 ESR were required.) |
| * To add the CA certificate to the certificate database yourself, you can try to use the [[https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil|nss certutil]]: <code bash>certutil -A -d $ZOTERO_PROFILE_PATH -n $CA_NICKNAME -t C -i $CA_CERT_FILE</code> | * Firefox 63 and later will automatically use the system root certificate store on macOS. If Firefox is using the system root store, your IT department may not have added its custom certificate to the certificate database in the Firefox profile directory, and copying the above-mentioned files to the Zotero profile directory may not work. Your IT department will need to [[https://support.mozilla.org/kb/setting-certificate-authorities-firefox|disabled security.enterprise_roots.enabled]] in about:config and add the custom root certificate to Firefox so that it can properly connect via the institution's intercepted connection. You can then copy the above files to the Zotero profile directory and reset the security.enterprise_roots.enabled setting in Firefox. A future version of Zotero will support automatically using system root certificates. |
| | * To add the CA certificate to the certificate database yourself, you can try to use the [[https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/tools/NSS_Tools_certutil|nss certutil]]: <code bash>certutil -A -d $ZOTERO_PROFILE_PATH -n $CA_NICKNAME -t C -i $CA_CERT_FILE</code> |
| | |
| |
| {{tag>kb }} | {{tag>kb }} |
Upgrade Storage