linux: support chrome via nss/certutil

[adamdecaf]

Issue: #11

[chlunde]

Isn't "brew", "--prefix", "nss" failing on your system, so you get hasCertutil = false? I had to change

diff --git a/truststore_firefox.go b/truststore_firefox.go
index 2410f21..611791f 100644
--- a/truststore_firefox.go
+++ b/truststore_firefox.go
@@ -18,6 +18,12 @@ func init() {
        _, err := os.Stat(FirefoxPath)
        hasFirefox = !os.IsNotExist(err)
 
+       certutilPath, err = exec.LookPath("certutil")
+       if err == nil {
+               hasCertutil = true
+               return
+       }
+
        out, err := exec.Command("brew", "--prefix", "nss").Output()
        if err != nil {
                return

but even that fails, for some reason I have not checked:

mkcert$ ./mkcert -install
Using the local CA at "/home/chlunde/.local/share/mkcert" ✨
ERROR: failed to execute "certutil -A": exit status 255

certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.

[adamdecaf]

My bad. I've got a fix incoming.

[adamdecaf]

This worked for me locally, but I also created #18 to drop the log.Fatal which prevents the firefox/chrome installs.

Test runs

root@ed7a4cef9c16:/# /mkcert -install
Using the local CA at "/root/.local/share/mkcert" ✨
  -install is not yet fully supported on Linux
You can manually install the root certificate at "/root/.local/share/mkcert/rootCA.pem" in the meantime.
The local CA is now installed in the Firefox trust store (requires restart)! 🦊

root@ed7a4cef9c16:/# /mkcert -install
Using the local CA at "/root/.local/share/mkcert" ✨
  -install is not yet fully supported on Linux
You can manually install the root certificate at "/root/.local/share/mkcert/rootCA.pem" in the meantime.
The local CA is now installed in the Chrome/Chromiumtrust store! 🦊

Edit: rebased after that PR was merged.

[FiloSottile]

@chlunde That's #12 and I would love help debugging that (see the issue).

[FiloSottile]

Thanks @adamdecaf, I used some of your code, but went for something a bit more DRY even if not as precise. Review and testing very welcome!

[adamdecaf]

LGTM