(no commit message)

[wiki.git] / enabling_client_certificate_auth_in_chrome.html

diff --git a/enabling_client_certificate_auth_in_chrome.html b/enabling_client_certificate_auth_in_chrome.html
index 34b92430f5b7a9fce70da3a651aafc307f27bec6..5bd34d258009e26bdb26813108c79d6fcc10a199 100644 (file)
--- a/enabling_client_certificate_auth_in_chrome.html
+++ b/enabling_client_certificate_auth_in_chrome.html
@@ -1,13 +1,11 @@
 <p>So, you want to run Chrome (or Chromium), but you're annoyed by the lack of
 client certificate authentication on Linux.  Turns out, this is relatively easy
-to solve, there's just no UI for it as of yet.  (As of 11/13/2009.)  (Note: I'm doing this running the daily build from the chromium-daily ppa on Launchpad - you can add deb http://ppa.launchpad.net/chromium-daily/ppa/ubuntu karmic main to your
+to solve, there's just no UI for it as of yet.  (As of 11/13/2009.)  (Note: I'm doing this running the daily build from the chromium-daily ppa on Launchpad - if you're running Debian or Ubuntu, you can add "deb http://ppa.launchpad.net/chromium-daily/ppa/ubuntu karmic main" to your
 /etc/apt/sources.list if you want to run this.  It may work on the official
 Google build as well, I'm not sure.)</p>
 
 <p>You want to use the instructions at
-<a href="http://code.google.com/p/chromium/wiki/LinuxCertManagement">Google's page on LinuxCertManagement</a> to install the MIT
-CA (click "Get the MIT CA" <a href="http://ist.mit.edu/services/certificates/mitca">here</a>
-to download it).  You may also want the <a href="http://ca.csail.mit.edu/cacert">CSAIL CA</a> (specifically, the Master CA).  If you're
+<a href="http://code.google.com/p/chromium/wiki/LinuxCertManagement">Google's page on LinuxCertManagement</a> to install the <a href="http://ist.mit.edu/services/certificates/mitca">MIT CA</a>.  You may also want the <a href="http://ca.csail.mit.edu/cacert">CSAIL CA</a> (specifically, the Master CA).  If you're
 running Debian or Ubuntu, the short version of that LinuxCertManagement page is
 to install libnss3-tools, then run "certutil -d sql:$HOME/.pki/nssdb -A -t
 "C,," -n <certificate nickname> -i <certificate filename>" for both the MIT CA
@@ -20,7 +18,7 @@ the LinuxCertManagement page and do it manually.</p>
 
 Here's the last key to the puzzle: by default, Chrome on Linux runs without SSL
 client cert auth.  So run it with the --auto-ssl-client-auth flag.  You'll
-probably want to edit both Preferred Applications and the Main Menu entry to
+probably want to edit both Preferred Applications and the Main Menu entry (I'm assuming you run Gnome here; if not, there may be other things you want to edit) to
 reflect this, so links you click on outside of Chrome open this way.  (Gnome Do
 and similar pull their data from Main Menu, among other places.)  Once you've
 done this, you can check your work with