[GH-ISSUE #120] ERROR: no Firefox and/or Chrome/Chromium security databases found

kerem commented

2026-02-25 22:32:31 +03:00

Owner

Originally created by @Artarex on GitHub (Jan 16, 2019).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/120

Hey. I installed mkcert via rpm -Uvh harbottle-main-release*rpm
yum install mkcert
On my centos 7.

When i try to use "mkcert -install" it gives me the following error
"Using the local CA at "/root/.local/share/mkcert" ✨
ERROR: no Firefox and/or Chrome/Chromium security databases found
"

Any idea how to fix this?

Originally created by @Artarex on GitHub (Jan 16, 2019). Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/120 Hey. I installed mkcert via rpm -Uvh harbottle-main-release*rpm yum install mkcert On my centos 7. When i try to use "mkcert -install" it gives me the following error "Using the local CA at "/root/.local/share/mkcert" ✨ ERROR: no Firefox and/or Chrome/Chromium security databases found " Any idea how to fix this?

kerem closed this issue

2026-02-25 22:32:31 +03:00

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@adamdecaf commented on GitHub (Jan 16, 2019):

Do you know where the database is? I assume on centos it's not at $HOME/.pki/nssdb.

@adamdecaf commented on GitHub (Jan 16, 2019): Do you know where the database is? I assume on centos it's not at `$HOME/.pki/nssdb`.

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@Artarex commented on GitHub (Jan 16, 2019):

Hey.
I think it is located in /etc/pki/nssdb
I have a cert8, cert9, key3 key4 and secmod.db in this folder
What do I need to change that it works?

Thanks for your help

@Artarex commented on GitHub (Jan 16, 2019): Hey. I think it is located in /etc/pki/nssdb I have a cert8, cert9, key3 key4 and secmod.db in this folder What do I need to change that it works? Thanks for your help

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@adamdecaf commented on GitHub (Jan 17, 2019):

@Artarex would you be able to pull down this Pull Request and try?

Branch: https://github.com/adamdecaf/mkcert/tree/more-nss-locations

@adamdecaf commented on GitHub (Jan 17, 2019): @Artarex would you be able to pull down [this Pull Request](https://github.com/FiloSottile/mkcert/pull/121) and try? Branch: https://github.com/adamdecaf/mkcert/tree/more-nss-locations

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@Artarex commented on GitHub (Jan 17, 2019):

Thanks for the fast response. Would it be possible to create a pre build binary for me?
My Centos has some problems with compiling and installing Go, and I dont have the time the next 2-3 days to figure out why. (CentOS is "fun" sometimes)
So i would appreciate a pre build binary
Thanks

@Artarex commented on GitHub (Jan 17, 2019): Thanks for the fast response. Would it be possible to create a pre build binary for me? My Centos has some problems with compiling and installing Go, and I dont have the time the next 2-3 days to figure out why. (CentOS is "fun" sometimes) So i would appreciate a pre build binary Thanks

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@adamdecaf commented on GitHub (Jan 17, 2019):

@FiloSottile Do you object to me uploading a binary?

$ git log -n1 
commit a37de7396998699097a7e4877fbf1c185d471c13 (HEAD -> more-nss-locations, adamdecaf/more-nss-locations)
Author: Adam Shannon <adamkshannon@gmail.com>
Date:   Wed Jan 16 18:05:19 2019 -0600

    nss: look in more locations for cert/key database

$ GOOS=linux go build -o mkcert-linux . 

$ zip mkcert-centos.zip mkcert-linux 
  adding: mkcert-linux (deflated 50%)

$ shasum -a256 mkcert-centos.zip 
f9cb839d331d52bd80a036daa3ad15086ea210351bf5e591f8cc4632f6fb4f22  mkcert-centos.zip

@adamdecaf commented on GitHub (Jan 17, 2019): @FiloSottile Do you object to me uploading a binary? ``` $ git log -n1 commit a37de7396998699097a7e4877fbf1c185d471c13 (HEAD -> more-nss-locations, adamdecaf/more-nss-locations) Author: Adam Shannon <adamkshannon@gmail.com> Date: Wed Jan 16 18:05:19 2019 -0600 nss: look in more locations for cert/key database $ GOOS=linux go build -o mkcert-linux . $ zip mkcert-centos.zip mkcert-linux adding: mkcert-linux (deflated 50%) $ shasum -a256 mkcert-centos.zip f9cb839d331d52bd80a036daa3ad15086ea210351bf5e591f8cc4632f6fb4f22 mkcert-centos.zip ```

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@Artarex commented on GitHub (Jan 17, 2019):

I compiled the source on windows and moved the new compiled mkcert file to my bin folder and replaced the old one.
mkcert -install did not give me an error this time.
However i did not get these 2 messages:
"The local CA is now installed in the system trust store! ⚡️
The local CA is now installed in the Firefox trust store (requires restart)! 🦊"

So thats my console output:

Edit: I still had the old files in /root/.local/share/mkcert
after deleting them i got this console output:

[root@wph5ak0 ~]# mkcert -install
Created a new local CA at "/root/.local/share/mkcert" 💥
The local CA is now installed in the system trust store! ⚡️

The "The local CA is now installed in the Firefox trust store (requires restart)! 🦊" Is still missing.

@Artarex commented on GitHub (Jan 17, 2019): I compiled the source on windows and moved the new compiled mkcert file to my bin folder and replaced the old one. mkcert -install did not give me an error this time. However i did not get these 2 messages: "The local CA is now installed in the system trust store! ⚡️ The local CA is now installed in the Firefox trust store (requires restart)! 🦊" So thats my console output: Edit: I still had the old files in /root/.local/share/mkcert after deleting them i got this console output: [root@wph5ak0 ~]# mkcert -install Created a new local CA at "/root/.local/share/mkcert" 💥 The local CA is now installed in the system trust store! ⚡️ The "The local CA is now installed in the Firefox trust store (requires restart)! 🦊" Is still missing.

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@adamdecaf commented on GitHub (Jan 17, 2019):

Do you know if the Firefox binary is installed somewhere other than /usr/bin/firefox?

@adamdecaf commented on GitHub (Jan 17, 2019): Do you know if the Firefox binary is installed somewhere other than `/usr/bin/firefox`?

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@Artarex commented on GitHub (Jan 17, 2019):

My Centos7 had no Firefox binary.

I installed firefox via yum install firefox and now the firefox binary is in the right directory.

If I do now mkcert -install it gives the error again:

Created a new local CA at "/root/.local/share/mkcert" 💥
The local CA is now installed in the system trust store! ⚡️
ERROR: no Firefox and/or Chrome/Chromium security databases found

The databases are still at the same location in etc/pki/nssdb

I will Test your next ideas tomorrow. It's late here.

@Artarex commented on GitHub (Jan 17, 2019): My Centos7 had no Firefox binary. I installed firefox via yum install firefox and now the firefox binary is in the right directory. If I do now mkcert -install it gives the error again: Created a new local CA at "/root/.local/share/mkcert" 💥 The local CA is now installed in the system trust store! ⚡️ ERROR: no Firefox and/or Chrome/Chromium security databases found The databases are still at the same location in etc/pki/nssdb ![1](https://user-images.githubusercontent.com/15215220/51289828-06ed9100-1a02-11e9-97ee-251bfe582b38.png) I will Test your next ideas tomorrow. It's late here.

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@adamdecaf commented on GitHub (Jan 22, 2019):

I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written.

@adamdecaf commented on GitHub (Jan 22, 2019): I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written.

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@RAM1160 commented on GitHub (Dec 4, 2019):

test your path to mkcert : mkcert -CAROOT
if its /root/.local/share/mkcert you have to uninstall mkcert and reinstall it without root
mkcert -install
the path should look something like this:
home/YourAccount/.local/share/mkcert
FF & Chrome do not allow certs from root

Hope that helps

@RAM1160 commented on GitHub (Dec 4, 2019): test your path to mkcert : mkcert -CAROOT if its /root/.local/share/mkcert you have to uninstall mkcert and reinstall it without root mkcert -install the path should look something like this: home/YourAccount/.local/share/mkcert FF & Chrome do not allow certs from root Hope that helps

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@salehawal commented on GitHub (Oct 13, 2021):

in my case it was because i run the command as "sudo", so what i did i uninstall it and then reinstall it without "sudo"

sudo mkcert -uninstall
mkcert -install

@salehawal commented on GitHub (Oct 13, 2021): in my case it was because i run the command as "sudo", so what i did i uninstall it and then reinstall it without "sudo" ``` sudo mkcert -uninstall mkcert -install ```

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@justanothersynth commented on GitHub (Jun 27, 2023):

I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written.

Thanks @adamdecaf! This did it for me.

@justanothersynth commented on GitHub (Jun 27, 2023): > I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written. Thanks @adamdecaf! This did it for me.

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@Letlaka commented on GitHub (Jul 12, 2023):

I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written.

This worked for me too, Thanks!

@Letlaka commented on GitHub (Jul 12, 2023): > I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written. This worked for me too, Thanks!

kerem commented

2026-02-25 22:32:31 +03:00

Author

Owner

@144mdgross commented on GitHub (Jan 28, 2025):

I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written.

same! this also worked for me

@144mdgross commented on GitHub (Jan 28, 2025): > I had to start Firefox/Chrome and load an HTTPS page before the NSS database was written. same! this also worked for me

kerem referenced this issue

2026-02-25 22:33:19 +03:00

[PR #68] [MERGED] Nitpicky fix on Macports install info #379

Rows
Columns

[GH-ISSUE #120] ERROR: no Firefox and/or Chrome/Chromium security databases found #68