Enable the use private PKI certificates for Firefox Mobile on Android

firefox_mobile.md

created	modified	description
2024-11-18+CST -06:00	2024-11-18+CST -06:00	Enable the use private PKI certificates for Firefox Mobile on Android

Firefox Mobile

usage

• Optional addons to enhance the certificate status and diagnostics info.
  • Server Status

Android OS

1a. Add your root certificate(s) to the global certificate store.

• The exact process varies depending on the major OS release, i.e. Android 10.x and above defaults to mounting the system partition as ro and thus you will continue receiving a warning message regarding the "trust" level. When available, it is suggested that you root your device for the best experience.

• In addition to the existing security policy, I have just discovered that a private Certificate Authority must also have its x509 attribute {"CA": true}. Otherwise, Android 11+ requires the private key certificate as well to be accepted.

2a. Instructions to enable the "secret settings" in the Settings menu for Firefox Nightly. This lets you access "Secret Settings" and "Secret Debug Info" in the Settings menu.

2b. Tap on three-dot menu in the toolbar

2c. Tap on Settings

2d. Scroll down and select "About Firefox Nightly"

2e. Tap the Firefox logo until you see the "Debug menu: (#) click(s) left to enable" helper message. Once the Debug menu has been enabled, go back to Settings and you will see "Secret Settings" and "Secret Debug Info" menu items

2f. Enable Use third party certificates and then restart Firefox by viewing the App Info window for the Firefox app and using Force quit.

2g. Profit! $$$

iOS

STUB: WIP

Reference Documents

1. https://connect.mozilla.org/t5/ideas/allow-personal-certificates-in-firefox-mobile/idi-p/176