Provide a way to remove manually installed certificates

NEW
Unassigned

Status

()

Firefox for Android
Settings and Preferences
a year ago
5 months ago

People

(Reporter: Ralf Jung, Unassigned, NeedInfo)

Tracking

50 Branch
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [parity-desktop])

(Reporter)

Description

a year ago
User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:50.0) Gecko/20100101 Firefox/50.0
Build ID: 20161213211510

Steps to reproduce:

I installed a .pem file as a certificate for later use in Wifi authentication. Only later I realized that Firefox has its own, separate trust store from the rest of Android, so this doesn't actually work (I then used Chromium to install the certificate).
Now I am stuck with a certificate in my Firefox trust store that I don't want to be there. If I understand https://support.mozilla.org/en-US/questions/1140625 correctly, it is currently impossible to remove certificates again from the trust store. That's a rather severe problem, I now have the choice of either loosing all my bookmarks and settings or having a certificate trusted that I never wanted to trust for websites. Not good.
This might be a core browser feature we are missing - should this be added to trello / the roadmap?
Flags: needinfo?(bbermes)
Added to the Trello board for the Taipei team to look into.

Depending on effort, I can't promise that this will get high priority but we will put it on our list.
Flags: needinfo?(bbermes)
(Reporter)

Comment 3

a year ago
That's great, thanks :)
See also bug 795767 - certificate overrides cannot be easily removed, either.
See Also: → bug 795767
Status: UNCONFIRMED → NEW
Ever confirmed: true
Whiteboard: [parity-desktop]

Comment 5

7 months ago
Hi Joe
Please help advise
Flags: needinfo?(jcheng)

Comment 6

5 months ago
Consider using Android's built-in cert store?
You need to log in before you can comment on or make changes to this bug.