Importing Certificate Path into Firefox

Cryptography Tutorials - Herong's Tutorial Examples

∟Using Certificates in Firefox

∟Importing Certificate Path into Firefox

This section provides a tutorial example of trying to import a certificate path into Firefox. But it failed..

Next, I want to import some other certificates signed by me into Firefox to form a certificate path:

herong.crt - self-signed by Herong.
john.crt - signed by Herong.
bill.crt - signed by John.
tom.crt - signed by Bill.

1. Repeat steps listed in the previous tutorial until you see the Certificate Manager dialog box.

2. Click the "People" tab and click the "Import" button. The "Select File containing somebody's Email certificate to import" dialog box shows up.

3. Keep the select in "Files of type" as "Certificate Files" and select "john.crt".

4. Click the "Open" button. No validation errors, because the issuer, Herong Yang, has a CA certificate in Firefox now.

But John's certificate is not showing up in the "People" category. If check the "Others" category. Surprisingly, John's certificate is listed there!

5. Click the "People" tab and click the "Import" button. The "Select File containing somebody's Email certificate to import" dialog box shows up.

6. Keep the select in "Files of type" as "Certificate Files" and select "bill.crt".

7. Click the "Open" button. An alert message shows up: "This certificate can't be verified and will not be imported. The certificate issuer might be unknown or untrusted, the certificate might have expired or been revoked, or the certificate might not have been approved."

The message is clear. The issuer of Bill's certificate is "John Smith", whose certificate is in Firefox, but not trusted.

Looks like there is no way to import a full certificate path into Firefox.

Table of Contents

About This Book

Cryptography Terminology

Cryptography Basic Concepts

Introduction to AES (Advanced Encryption Standard)

Introduction to DES Algorithm

DES Algorithm - Illustrated with Java Programs

DES Algorithm Java Implementation

DES Algorithm - Java Implementation in JDK JCE

DES Encryption Operation Modes

DES in Stream Cipher Modes

PHP Implementation of DES - mcrypt

Blowfish - 8-Byte Block Cipher

Secret Key Generation and Management

Cipher - Secret Key Encryption and Decryption

Introduction of RSA Algorithm

RSA Implementation using java.math.BigInteger Class

Introduction of DSA (Digital Signature Algorithm)

Java Default Implementation of DSA

Private key and Public Key Pair Generation

PKCS#8/X.509 Private/Public Encoding Standards

Cipher - Public Key Encryption and Decryption

MD5 Mesasge Digest Algorithm

SHA1 Mesasge Digest Algorithm

OpenSSL Introduction and Installation

OpenSSL Generating and Managing RSA Keys

OpenSSL Managing Certificates

OpenSSL Generating and Signing CSR

OpenSSL Validating Certificate Path

"keytool" and "keystore" from JDK

"OpenSSL" Signing CSR Generated by "keytool"

Migrating Keys from "keystore" to "OpenSSL" Key Files

Certificate X.509 Standard and DER/PEM Formats

Migrating Keys from "OpenSSL" Key Files to "keystore"

Using Certificates in IE

Using Certificates in Google Chrome

►Using Certificates in Firefox

Visiting an "https" Web Site with Firefox

Viewing Certificate Details

Managing Certificates in Certificate Stores

Exporting Certificates Out of Firefox

OpenSSL Viewing Certificates Exported from Firefox

Importing CA Certificate into Firefox

►Importing Certificate Path into Firefox

Archived Tutorials

Full Version in PDF/EPUB