nss: write a notice about being asked for db password

[adamdecaf]

Issue: #50

[FiloSottile]

But most users don't have a master password, so it would be confusing wouldn't it?

Can we instead print something like (hint, this is your Firefox master password) if certutil is taking more than 1s?

[adamdecaf]

Good point. I'll try and do that.

[FiloSottile]

#100 (comment)

[adamdecaf]

This works locally for me, I tried with and without a firefox master password.

$ go run . -install 
Using the local CA at "/Users/adam/Library/Application Support/mkcert" ✨
The local CA is now installed in the system trust store! ⚡️
Enter Password or Pin for "NSS Certificate DB":
(hint, this is your Firefox master password))
 
The local CA is now installed in the Firefox trust store (requires browser restart)! 🦊
The local CA is now installed in Java's trust store! ☕️

$ go run . -install 
Using the local CA at "/Users/adam/Library/Application Support/mkcert" ✨
The local CA is now installed in the system trust store! ⚡️
The local CA is now installed in the Firefox trust store (requires browser restart)! 🦊
The local CA is now installed in Java's trust store! ☕️

[lopezator]

Is this going to be merged anytime? I've been also hit by this.

[algorun77]

Hello, same here, is it planned to be merged someday ? It would really be helpful to have that hint because right now, the password asked is confusing

[jesusdf]

2022 and we still have this issue ongoing.

What about "Enter your Firefox primary password (or leave blank if no password is set)"?

[nathansmithbz]

Agreed. This really should be clearer.

[adamdecaf]

cc @FiloSottile

[gitressa]

Thanks for a great tool. I just ran into the cryptic Enter Password or Pin for "NSS Certificate DB": message, while installing mkcert ddev/ddev#4914.

It would save Firefox users with Master/Primary password enabled much time if this got committed :)

[adamdecaf]

I've updated the PR, so can you try it out? cc @gitressa cc @FiloSottile

[gitressa]

Thanks for a fast reply and update @adamdecaf! It works well, and the help text is shown:

$ mkcert -install
Created a new local CA 💥
The local CA is now installed in the system trust store! ⚡️
Enter Password or Pin for "NSS Certificate DB":
(hint, this is your Firefox primary password))

The local CA is now installed in the Firefox and/or Chrome/Chromium trust store (requires browser restart)! 🦊

Note the double "))" at the end. Also, the cursor is shown under the Firefox help sentence, at the red arrow ...

it's not a big deal. I guess it probably isn't possible to keep it after [...] "NSS Certificate DB":?

[adamdecaf]

Glad to see it working! I fixed the double )). I don't think we can keep the cursor on the previous line - terminals don't work like that.

[gitressa]

Yeah, that's what I thought. But that's a detail, getting the Firefox primary password message in mkcert is what really counts. Have a great day!