summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFlorian Bruhin <me@the-compiler.org>2020-01-20 19:54:57 +0100
committerFlorian Bruhin <me@the-compiler.org>2020-01-20 19:54:57 +0100
commit923ab2687be6cc539caf7c3c1d8ee8d091165073 (patch)
treeec52767e99eb8034cf2d2399ff5998fa04b5dbdb
parentc4a817ba9defe5d3a50b7157aa60c1eef25457d0 (diff)
downloadqutebrowser-923ab2687be6cc539caf7c3c1d8ee8d091165073.tar.gz
qutebrowser-923ab2687be6cc539caf7c3c1d8ee8d091165073.zip
Edit client certificate FAQ
-rw-r--r--doc/faq.asciidoc10
1 files changed, 7 insertions, 3 deletions
diff --git a/doc/faq.asciidoc b/doc/faq.asciidoc
index ee9606372..32861c87c 100644
--- a/doc/faq.asciidoc
+++ b/doc/faq.asciidoc
@@ -97,7 +97,7 @@ security bugs, please contact me directly at mail@qutebrowser.org, GPG ID
https://www.the-compiler.org/pubkey.asc[0x916eb0c8fd55a072].
Is there an ad blocker?::
- There is a simple host-based ad blocker that takes `/etc/hosts`-like lists.
+ There is a simple host-based ad blocker that takes `/etc/hosts`-like lists.
+
More advanced ad blockers can have a big impact on browsing speed and https://blog.mozilla.org/nnethercote/2014/05/14/adblock-pluss-effect-on-firefoxs-memory-usage/[RAM usage], so implementing support for AdBlock Plus-like lists is not a priority.
How can I get No-Script-like behavior?::
@@ -267,8 +267,12 @@ Right now there is no certificate-chooser prompt implemented when there are
multiple matches. Subscribe to https://github.com/qutebrowser/qutebrowser/issues/4587[Issue#4587]
for progress notifications.
+
-Currently QtWebEngine will attempt to use certificates stored in
-`${HOME}/.pki/nssdb` by default. Assuming you have a CA Certificate and a
+QtWebEngine will attempt to use certificates stored in `${HOME}/.pki/nssdb`. If
+you have Chromium installed, you can import the certificate there and
+qutebrowser will pick it up as well. Alternatively, you can use the `certutil`
+commandline tool:
++
+Assuming you have a CA Certificate and a
Client Certificate that you want for authenticating yourself on a web
service that validates against this CA Certificate, you need to perform
the following steps.