iis-builder icon indicating copy to clipboard operation
iis-builder copied to clipboard

Add instructions for Firefox

Open creativesuspects opened this issue 4 years ago • 1 comments

I use IIS Builder with all my projects, but Firefox (90.0.2) doesn't accept the self-signed certificates by default. Maybe you could add the following instructions to the README to help other developers that run into the same issue with Firefox?

Use the Windows certificate store

As of FF49, a new option has been included which allows Firefox to trust Root authorities in the windows certificate store. This means that certificates can be deployed via group policy as normal and Firefox will trust the same Root authorities that Internet Explorer trusts. For more details see here:

https://bugzilla.mozilla.org/show_bug.cgi?id=1265113

Unfortunately, Mozilla have decided not to turn this feature on by default, so this method still requires some other configuration. To enable this setting the security.enterprise_roots.enabled must be set to true. For more details see here:

https://bugzilla.mozilla.org/show_bug.cgi?id=1314010

To enable this feature on a single computer:

  • In Firefox, type 'about:config' in the address bar
  • If prompted, accept any warnings
  • Right-click to create a new boolean value, and enter 'security.enterprise_roots.enabled' as the Name
  • Set the value to 'true'

creativesuspects avatar Aug 06 '21 11:08 creativesuspects

Thanks for this and thanks for using my script on all your web projects! I will find some time to replicate this, follow your guide and update the README.

Happy IIS Building!!

mattou07 avatar Aug 06 '21 11:08 mattou07