0

Since a recent version, Google Chrome maintains its own “local store” for SSL root certificates, allowing users to trust certificates without installing them at the Windows OS level. You can view this store at: "chrome://certificate-manager/localcerts"

User?added certificates appear under “User Certificates” at: "chrome://certificate-manager/localcerts/usercerts"

I’d like to automate adding a certificate to Chrome’s local store via command line using a .bat script.

I located the file: < Chrome Profile Directory >\Default\ServerCertificate

It’s an SQLite3 database that stores certificates in DER format. Using the sqlite3 command, I inserted my DER?encoded certificate into the ServerCertificate table. After restarting Chrome, I see that one certificate appears under Local Store (chrome://certificate-manager/localcerts), but it does not show up under User Certificates ("chrome://certificate-manager/localcerts/usercerts").

And of course, the certificate does not work, I must be missing a file to edit.

Which file(s) or registry entries does Chrome update when you manually import a Root CA into its local store? In other words, what else besides the ServerCertificate SQLite database needs to be modified so that a batch script can replicate the manual Import.

Improve this question
Related questions
3410
Improve INSERT-per-second performance of SQLite
769
Unable to resolve "unable to get local issuer certificate" using git on Windows with self-signed certificate
1272
How can I develop for iPhone using a Windows development machine?
Load 6 more related questions Show fewer related questions

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.