mirror of
https://github.com/Start9Labs/documentation.git
synced 2026-04-01 21:13:10 +00:00
abstract firefox guides for ca and tor
This commit is contained in:
@@ -7,11 +7,6 @@ Complete this guide to trust your server's Root Certificate Authority (Root CA)
|
||||
|
||||
.. note:: This guide only applies to Android phones running Android v13+, as well as phones running CalyxOS, GrapheneOS, or LineageOS (v19+).
|
||||
|
||||
.. _ca-android-trust:
|
||||
|
||||
Trusting
|
||||
--------
|
||||
|
||||
#. Ensure you have already :ref:`downloaded your Root CA <root-ca-download>`
|
||||
|
||||
#. Tap **Settings > Security > More security settings > Encryption & credentials > Install a certificate > CA Certificate > Install Anyway** and select your custom-named ``adjective-noun.local.crt`` certificate.
|
||||
@@ -20,11 +15,4 @@ Trusting
|
||||
:width: 15%
|
||||
:alt: Install certificate
|
||||
|
||||
.. _ca-android-ff:
|
||||
|
||||
If using Firefox (recommended)
|
||||
------------------------------
|
||||
|
||||
#. Tap ``Kebab Menu > Settings > About Firefox`` and tap the Firefox icon 5 times to enable "developer mode"
|
||||
|
||||
#. Go back to ``Kebab Menu > Settings > Secret Settings`` (at the bottom), and tap ``Use third party CA certificates``
|
||||
#. If using Firefox (recommended), complete :ref:`this final step <ca-ff>`
|
||||
@@ -76,58 +76,7 @@ You can also add the following browsers to the Tor-Enabled Apps list to easily a
|
||||
|
||||
.. caution:: Pushing apps through Orbot's VPN mode will allow you to access .onion URLs, however, all other traffic will also go through Tor. This means connections to some sites may be blocked by site operators' fraud prevention measures, especially e-commerce sites where credit cards are used. Proceed with caution especially for Web Browsers.
|
||||
|
||||
|
||||
If using Firefox (recommended)
|
||||
------------------------------
|
||||
|
||||
#. Download the `Proxy Auto Config` file that will use Orbot to resolve `.onion` URLs. We have one hosted `here <https://start9.com/assets/proxy.pac>`_
|
||||
|
||||
#. Open Firefox and enter ``about:config`` in the URL bar. Accept any warnings that appear
|
||||
|
||||
#. Search for ``network.proxy.autoconfig_url``, and set the value to ``file:///storage/emulated/0/Download/proxy.pac``. This is the default location of a the proxy.pac file downloaded in step 2, although your path may vary:
|
||||
|
||||
.. figure:: /_static/images/tor/autoconfig_url.png
|
||||
:width: 30%
|
||||
:alt: Firefox autoconfig url setting screenshot
|
||||
|
||||
#. Navigate to ``about:config`` in the Firefox URL bar:
|
||||
|
||||
.. figure:: /_static/images/tor/about_config.png
|
||||
:width: 30%
|
||||
:alt: Firefox about config
|
||||
|
||||
#. Search for ``network.proxy.type`` into the search bar, and set the value to ``2``:
|
||||
|
||||
.. figure:: /_static/images/tor/network_proxy_type.png
|
||||
:width: 30%
|
||||
:alt: Firefox network proxy type setting screenshot
|
||||
|
||||
#. Search for ``network.proxy.socks_remote_dns``, and set the value to ``true``:
|
||||
|
||||
.. figure:: /_static/images/tor/socks_remote_dns.png
|
||||
:width: 30%
|
||||
:alt: Firefox socks remote dns setting screenshot
|
||||
|
||||
#. Search for ``dom.securecontext.allowlist_onions`` and set the value to ``true``:
|
||||
|
||||
.. figure:: /_static/images/tor/firefox_allowlist_mobile.png
|
||||
:width: 30%
|
||||
:alt: Firefox whitelist onions screenshot
|
||||
|
||||
#. Search for ``network.websocket.allowInsecureFromHTTPS`` and set the value to ``true``:
|
||||
|
||||
.. figure:: /_static/images/tor/firefox_insecure_websockets_droid.png
|
||||
:width: 30%
|
||||
:alt: Firefox allow insecure websockets over https
|
||||
|
||||
#. Search for ``network.http.referer.hideOnionsSource`` and set the value to ``true``
|
||||
|
||||
#. (**GrapheneOS users only**): Head to ``Settings -> Apps -> Firefox Beta -> Permissions -> Photos and videos -> Configure Storage Scopes -> ADD FILE``, then navigate to where you placed the proxy.pac file:
|
||||
|
||||
.. figure:: /_static/images/tor/storage-scopes-proxy.jpg
|
||||
:width: 15%
|
||||
|
||||
#. Restart Firefox
|
||||
|
||||
#. Test that Firefox can resolve `.onion` URLs by visiting Start9's Tor website: http://privacy34kn4ez3y3nijweec6w4g54i3g54sdv7r5mr6soma3w4begyd.onion. If this does not work, go through this guide again, ensuring you followed every step, including the first which refers to another guide
|
||||
|
||||
#. You can now use the `.onion` URLs of your server and installed services
|
||||
Complete this guide: :ref:`tor-ff`
|
||||
Reference in New Issue
Block a user