Allow personal certificates in Firefox mobile

[fprietog]

Nowadays there are several webs from government, banks, etc... that need the usage of personal certificates to login into them.

There is no problem in Firefox desktop but in Firefox mobile there is no way to use personal certificates. So it cause the necessity to use an alternative browser for these kind of webs.

The strange thing is that in older Firefox mobile versions there were a way to use these certs but not in modern versions (?).

[KevinBrosnan]

Try the following steps

• Install the certificate into the Android cert store 
• enable Firefox's secret settings
• enable choosing Use third party certificates
• restart Firefox by either force quitting the app in the Android app settings or restarting the phone, swiping closed Firefox may not do a full restart.

Does this allow the websites to be accessed?

[fprietog]

Unfortunately that setting seems that don't allow Personal certificates.

I've also tried the old "trick" that was manually adding the personal certs to Firefox cert files (as root) and it also doesn't work. At least it show the Personal certificates in about:certificate page but are unusable. That worked in previous (old) Firefox mobile versions but not now.

[tomfun]

That is the only feature preventing me from deleting chrome

[fprietog]

This is my usage case: firefox for general browsing and chrome for secured services that need personal certificate like banking, health services or taxes.

I want to get rid of chrome too but personal certificates support is a must.

[jsabater]

Could not agree more. The comments above reflect my case too. I hope Firefox can use the certificates installed in the system, as Chrome does, and finally get rid of the later and use only the former in my mobile phone.

[NoOne]

It's the minimum expected for Firefox Nightly to have the feature to accept a user-installed CA certificate on Android. Why is something so basic and necessary not enabled? Why isn't there even an option to activate this? Honestly, this is frustrating and disappointing.

[mozillian]

Add certificate information tab on mobile

There's currently no certificate information tab for Mobile Firefox. Chromium has it; it's really useful at times.

[lmcastro]

I subscribe what has already been said: it is sad that one has to resort to Chrome on tablets/phones because Firefox mobile does not handle personal certificates 😞

[kunipferd]

This worked for me:

Enable secret settings on FFfandroid

Enable "use thrid party ca certificates" in secret settings

Upload your custom certificate authority pem file to the android cert store (check for your phone how to do that)
restart the phone (yes, seriously)
Now my dev machine certs are accepted:

[aaravchen]

Per this bugzilla issue (https://bugzilla.mozilla.org/show_bug.cgi?id=1813930), it was added in Firefox 138.  I just tried it on Firefox Nightly, which is on 139, and it does prompt you.  Just like Firefox on the desktop though, you may need to give it second to fail to prompt you at first, reload the page to get the prompt, fail to load after you've picked the certificate and force you to reload again, give a connection error, and force you to click the Try Again button before it works.

So the steps are:

1. Get Firefox for Android >= 138.
2. Install the client certificate in your Android user store (this is often called "VPN and other certificates" in the Certificate Settings section)
3. Reboot? (I did, but I don't know if it's necessary)
4. Verify it works in Chromium (validates matching of client certificate to requirements sent by server)
5. Open Firefox and go to the site
6. Wait 20 seconds
7. if the pop up to select a client certificate doesn't appear, refresh
8. Pop up should appear for you to pick the client certificate (looks just like in Chromium)
9. Pop up will disappear after selection, but site will still fail to load
10. Refresh the page
11. Site will hang, then give a "Connection Error" message with a "Try Again" button. Click the button.
12. Site will load

Unfortunately you'll be re-prompted every time you return to the site after closing its tab. But it will usually load the site correctly immediately after you pick the certificate from the popup, unlike the first time you went thru it. And you won't be reprompted when you're just navigating around the site, or when you switch back and forth between tabs while it's still open.