I have a large number of workstations that run RedHat Enterprise Linux 5 and 6. I'd like to deploy our new internal CA (Active Directory) to these machines. I can manually import the certificate into Firefox 10 without any issues, but I can't seem to find where to store the .cer file on the filesystem so that it will be used by FireFox and Google Chrome. Is there a central location for trusted CAs that is used by both of these browsers?
If not, I'd settle for a more-automated way to have FireFox accept my CA.
Stuff I've Tried
- Using the Mozilla-provided
certutil- but this seems to only deal with client-side certificates, unless I am mistaken.
/etc/pki/tls/ca-bundle.crtincluded in the
ca-certificatespackage. Firefox does not appear to honor this file.