ERROR: no Firefox and/or Chrome/Chromium security databases found

[Artarex]

Hey. I installed mkcert via rpm -Uvh harbottle-main-release*rpm
yum install mkcert
On my centos 7.

When i try to use "mkcert -install" it gives me the following error
"Using the local CA at "/root/.local/share/mkcert" ✨
ERROR: no Firefox and/or Chrome/Chromium security databases found
"

Any idea how to fix this?

[adamdecaf]

Do you know where the database is? I assume on centos it's not at $HOME/.pki/nssdb.

[Artarex]

Hey.
I think it is located in /etc/pki/nssdb
I have a cert8, cert9, key3 key4 and secmod.db in this folder
What do I need to change that it works?

Thanks for your help

[adamdecaf]

@Artarex would you be able to pull down this Pull Request and try?

Branch: https://github.com/adamdecaf/mkcert/tree/more-nss-locations

[Artarex]

Thanks for the fast response. Would it be possible to create a pre build binary for me?
My Centos has some problems with compiling and installing Go, and I dont have the time the next 2-3 days to figure out why. (CentOS is "fun" sometimes)
So i would appreciate a pre build binary
Thanks

[adamdecaf]

@FiloSottile Do you object to me uploading a binary?

$ git log -n1 
commit a37de7396998699097a7e4877fbf1c185d471c13 (HEAD -> more-nss-locations, adamdecaf/more-nss-locations)
Author: Adam Shannon <adamkshannon@gmail.com>
Date:   Wed Jan 16 18:05:19 2019 -0600

    nss: look in more locations for cert/key database

$ GOOS=linux go build -o mkcert-linux . 

$ zip mkcert-centos.zip mkcert-linux 
  adding: mkcert-linux (deflated 50%)

$ shasum -a256 mkcert-centos.zip 
f9cb839d331d52bd80a036daa3ad15086ea210351bf5e591f8cc4632f6fb4f22  mkcert-centos.zip

[Artarex]

I compiled the source on windows and moved the new compiled mkcert file to my bin folder and replaced the old one.
mkcert -install did not give me an error this time.
However i did not get these 2 messages:
"The local CA is now installed in the system trust store! ⚡️
The local CA is now installed in the Firefox trust store (requires restart)! 🦊"

So thats my console output:

Edit: I still had the old files in /root/.local/share/mkcert
after deleting them i got this console output:

[root@wph5ak0 ~]# mkcert -install
Created a new local CA at "/root/.local/share/mkcert" 💥
The local CA is now installed in the system trust store! ⚡️

The "The local CA is now installed in the Firefox trust store (requires restart)! 🦊" Is still missing.

[adamdecaf]

Do you know if the Firefox binary is installed somewhere other than /usr/bin/firefox?

[Artarex]

My Centos7 had no Firefox binary.

I installed firefox via yum install firefox and now the firefox binary is in the right directory.

If I do now mkcert -install it gives the error again:

Created a new local CA at "/root/.local/share/mkcert" 💥
The local CA is now installed in the system trust store! ⚡️
ERROR: no Firefox and/or Chrome/Chromium security databases found

The databases are still at the same location in etc/pki/nssdb

I will Test your next ideas tomorrow. It's late here.

[adamdecaf]

I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written.

[RAM1160]

test your path to mkcert : mkcert -CAROOT
if its /root/.local/share/mkcert you have to uninstall mkcert and reinstall it without root
mkcert -install
the path should look something like this:
home/YourAccount/.local/share/mkcert
FF & Chrome do not allow certs from root

Hope that helps

[salehawal]

in my case it was because i run the command as "sudo", so what i did i uninstall it and then reinstall it without "sudo"

sudo mkcert -uninstall
mkcert -install

[timelytree]

I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written.

Thanks @adamdecaf! This did it for me.

[Letlaka]

I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written.

This worked for me too, Thanks!