Lib.rs

osclientcerts

osclientcerts is a PKCS#11 module that will give Firefox the ability to use client authentication certificates stored in OS-specific mechanisms.

Support

osclientcerts currently has preliminary support for MacOS (using the keychain) and Windows (using CNG). Only RSA and EC keys are supported.

Howto

For the time being, this module must be manually compiled and added to Firefox. Clone the repo and run cargo build to build (this requires that a rust toolchain be installed, as well as a platform-specific development toolchain). Once built, there should be a file libosclientcerts.dylib (for MacOS) or osclientcerts.dll (for Windows) in target/debug (or target/release for release builds). To add the module to Firefox, open about:preferences, search for "Security Devices", and click the corresponding button. Then click "Load" and enter the path to the module library file (or find it using the file picker). Click "OK" (you can also give the module a more descriptive name). Once loaded, the module should allow Firefox to use client authentication certificates that are stored in or accessible from platform-specific mechanisms. Please file an issue if you encounter a certificate that should work but doesn't.