X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/61ee4da2f31e793a990fe3f7fccf77a620d92e02..deb9e1c43e15c18b082f229646018f07ca4686a0:/README.md diff --git a/README.md b/README.md index 67193e5..ee137d0 100644 --- a/README.md +++ b/README.md @@ -100,7 +100,14 @@ This policy can be used to install certificates or to read certificates from the The ImportEnterpriseRoots key will cause Firefox to import from the system certificate store. -The Install key by default will search for certificates in the locations listed below. Starting in Firefox 65, you can specify a fully qualified path (see cert3.der and cert4.pem in example). If Firefox does not find something at your fully qualified path, it will search the default directories. +The Install Certificates key by default will search for certificates in the locations listed below. +Starting in Firefox 65 you can specify a fully qualified path including UNC. (See cert3.der and cert4.pem, in example). + +**Be advised if you wish to load a certificate from a UNC path you must use double backslahes.** +Example: \\SERVER\\CERTS\CERT5.PEM + + +If Firefox does not find something at your fully qualified path, it will search the default directories. Certificates can be located in the following locations: - Windows @@ -120,7 +127,7 @@ Certificates can be located in the following locations: "policies": { "Certificates": { "ImportEnterpriseRoots": true, - "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem"] + "Install": ["cert1.der", "cert2.pem", "%SYSTEMDRIVE%\Company\cert3.der", "/Library/Company/cert4.pem", "\\server\\certs\\cert.pem"] } } } @@ -389,6 +396,7 @@ For Uninstall and Locked, you specify extension IDs. "Uninstall": ["addon_id@mozilla.org"], "Locked": ["addon_id@mozilla.org"] } + } } ``` ### HardwareAcceleration @@ -622,4 +630,23 @@ This policy allows you to add PKCS #11 Modules } } } +### SSLVersionMin +This policy allows you to set the minimum TLS version. +``` +{ + "policies": { + "SSSLVersionMin": ["tls1", "tls1.1", "tls1.2",. "tls1.3"] + } +} + +``` +### SSLVersionMax +This policy allows you to set the maximum TLS version. +``` +{ + "policies": { + "SSSLVersionMax": ["tls1", "tls1.1", "tls1.2",. "tls1.3"] + } +} + ```