Chrome forgets digital signature certificate

Support AUR
,
1

Hello there! If I import any of my digital signature certificates into Chrome, they run great until I close Chrome. After that, if I restart Chrome, there aren’t any of them. This is the output when I import some of these certificates:

❯ com.google.Chrome
Gtk-Message: 19:23:46.625: Failed to load module "xapp-gtk3-module"
Gtk-Message: 19:23:46.625: Failed to load module "canberra-gtk-module"
Gtk-Message: 19:23:46.625: Failed to load module "appmenu-gtk-module"
Stub sandbox ignoring command: /app/extra/nacl_helper
[2:2:1116/192346.971313:ERROR:nacl_fork_delegate_linux.cc(312)] Bad NaCl helper startup ack (0 bytes)
Gtk-Message: 19:23:47.040: Failed to load module "xapp-gtk3-module"
Gtk-Message: 19:23:47.040: Failed to load module "canberra-gtk-module"
Gtk-Message: 19:23:47.040: Failed to load module "appmenu-gtk-module"
[2:2:1116/192347.110221:ERROR:object_proxy.cc(577)] Failed to call method: org.kde.KWallet.isEnabled: object_path= /modules/kwalletd5: org.freedesktop.DBus.Error.ServiceUnknown: org.freedesktop.DBus.Error.ServiceUnknown
[2:2:1116/192347.110239:ERROR:kwallet_dbus.cc(112)] Error contacting kwalletd5 (isEnabled)
[2:2:1116/192347.111231:ERROR:object_proxy.cc(577)] Failed to call method: org.kde.KLauncher.start_service_by_desktop_name: object_path= /KLauncher: org.freedesktop.DBus.Error.ServiceUnknown: org.freedesktop.DBus.Error.ServiceUnknown
[2:2:1116/192347.111244:ERROR:kwallet_dbus.cc(81)] Error contacting klauncher to start kwalletd5
[2:2:1116/192347.112781:ERROR:object_proxy.cc(577)] Failed to call method: org.kde.KWallet.close: object_path= /modules/kwalletd5: org.freedesktop.DBus.Error.ServiceUnknown: org.freedesktop.DBus.Error.ServiceUnknown
[2:2:1116/192347.112789:ERROR:kwallet_dbus.cc(503)] Error contacting kwalletd5 (close)
[2:2:1116/192347.240893:ERROR:nacl_browser.cc(288)] Failed to open NaCl IRT file "/app/extra/nacl_irt_x86_64.nexe": -4
Fontconfig error: Cannot load default config file: No such file: (null)
[2:2:1116/192347.559339:ERROR:interface_endpoint_client.cc(702)] Message 0 rejected by interface blink.mojom.WidgetHost
Warning: vkCreateInstance: Found no drivers!
Warning: vkCreateInstance failed with VK_ERROR_INCOMPATIBLE_DRIVER
    at CheckVkSuccessImpl (../../third_party/dawn/src/dawn/native/vulkan/VulkanError.cpp:88)
    at CreateVkInstance (../../third_party/dawn/src/dawn/native/vulkan/BackendVk.cpp:458)
    at Initialize (../../third_party/dawn/src/dawn/native/vulkan/BackendVk.cpp:344)
    at Create (../../third_party/dawn/src/dawn/native/vulkan/BackendVk.cpp:266)
    at operator() (../../third_party/dawn/src/dawn/native/vulkan/BackendVk.cpp:521)

Fontconfig error: Cannot load default config file: No such file: (null)
[2:2:1116/193354.268974:ERROR:nsPKCS12Blob.cpp(254)] PKCS#12 import failed with error -8177
[2:2:1116/193445.185053:ERROR:interface_endpoint_client.cc(702)] Message 0 rejected by interface blink.mojom.WidgetHost
[57:57:1116/193555.530640:ERROR:shared_image_manager.cc(220)] SharedImageManager::ProduceSkia: Trying to Produce a Skia representation from a non-existent mailbox.
[2:2:1116/193555.542256:ERROR:interface_endpoint_client.cc(702)] Message 5 rejected by interface blink.mojom.WidgetHost
[2:2:1116/193640.213928:ERROR:nsPKCS12Blob.cpp(215)] Could not grab a handle to the certificate in the slot from the corresponding PKCS#12 DER certificate.
[57:57:1116/193838.889061:ERROR:shared_image_manager.cc(220)] SharedImageManager::ProduceSkia: Trying to Produce a Skia representation from a non-existent mailbox.
[57:57:1116/193838.889768:ERROR:shared_image_manager.cc(220)] SharedImageManager::ProduceSkia: Trying to Produce a Skia representation from a non-existent mailbox.
[57:57:1116/193838.890356:ERROR:shared_image_manager.cc(220)] SharedImageManager::ProduceSkia: Trying to Produce a Skia representation from a non-existent mailbox.

Obviously, I have tried to import them in Firefox, and the certificates have saved correctly.

2

Could it be related with kwallet?

3

I looks very much like a snap or flatpak… from the message printed

Have you tried to custom build from AUR? Of course you need to remove the flatpak/snap version first otherwise confusion is going to be complete …

pamac build google-chrome
4

AUR version works great, but I would prefer not used it…

5

You have your solution then …

If that is your choice … so be it - snap and flatpak requires some integration which is not always obvious.

I don’t think many members of this community uses snap or flatpak - when a version exist which can be managed natively.

1 Like
6

OK.
Thanks!
I thought that AUR packages there aren’t the “best option”
Maybe I’m confused about AUR, Manjaro and repos

7

That is a matter of habit - and your chosen Manjaro Linux branch.

pacman-mirrors -G

To use custom scripts from AUR without having to worry about the next official sync - switch to unstable branch - as this is the place where custom packages live their lives best.

2 Likes
8

I have stable mirrors.

Thanks for the information.
I’ll take a look to all of that.