[Triumf-linux-managers] TRIUMF Certificate Authority in firefox

[Kelvin Raywood]

There was a request to have any easy mechanism to import the certificate 
of the TRIUMF certificate-authority into firefox on a system-wide basis.
Certificates signed by the TRIUMF certificate authority are used by
many TRIUMF internal websites such elog, helpdesk, documents, ...

The mechanism for importing the certificate on a per-user basis is very 
straightforward, but doing it system-wide involves replacing a 
shared-library; see http://ca.triumf.ca .

Andrew Daviel has built this library for SL4 and SL5 and I have packaged
it as a well-behaved rpm.  This rpm has been made a requirement of the 
rpm triumf-workstation, so that machines that were installed with SL 4.5 
or later will get this automatically as long has nightly updates have 
not been disabled.  If nightly updates have been disabled, then you can 
install the rpm manually with:

     yum install triumf-cacert-nss

For machines that don't use the TRIUMF rpm mechanism for updates, the
rpm built for SL4 can be installed manually as it does not depend any 
any other packages in ther TRIUMF rpm repository. It is available at the 
URL below and also works on SL-3 and RedHat-9.

http://mirror.triumf.ca/triumf/4/i386/RPMS/triumf-cacert-nss-1.0-1.el4.i386.rpm

Kel Raywood
TRIUMF Core Computing and Networking