1883248 - Need a solution to add a root certificate to GeckoView

Status: UNCONFIRMED

(GeckoView :: General, enhancement)

Description

[Jerish Balakrishnan]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Steps to reproduce:

I am working on a GeckoView-based Web Browser project. One primary requirement of the project is to add a root certificate on the GeckoView so that it is independent of the system trust store. What is the way to do that?

Actual results:

When I add the root certificate to the system's trust store and add the following lines, it works!

GeckoRuntimeSettings.Builder runtimeSettingsBuilder = new GeckoRuntimeSettings.Builder();
runtimeSettingsBuilder.enterpriseRootsEnabled(true);
geckoRuntime = GeckoRuntime.create(this, runtimeSettingsBuilder.build());

Expected results:

But the problem is we can't install this certificate on every user's device. We need to ship it along with the browser.

Please give me some ideas to implement this.

Comment 1

[Jerish Balakrishnan]

If the certificate needs to be shipped with the code, what are the files I need to edit?

I don't have much idea about the GeckoView.

Comment 2

[Jerish Balakrishnan]

Attachment: ccaindia2022.cer

Comment 3

[Jerish Balakrishnan]

Comment on attachment 9388880 [details]
ccaindia2022.cer

Here is the root certificate, i need to add

Comment 4

[jackyzy823]

https://wiki.mozilla.org/CA/AddRootToFirefox