From 8bbd5e6976b4172f23586105f6794ff2357aed30 Mon Sep 17 00:00:00 2001
From: drebs <drebs@leap.se>
Date: Wed, 28 Sep 2016 09:14:43 -0300
Subject: [doc] add certificate generation info to readme

---
 README.rst | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/README.rst b/README.rst
index 727eedf..018a509 100644
--- a/README.rst
+++ b/README.rst
@@ -23,6 +23,28 @@ extension directory whose contents point to the repository dir:
 * The file name must be `bitmask-thunderbird@leap.se`.
 * The file contents must be the path for this repository.
 
+Certificates
+------------
+
+For generating signed XPI packages you need a code signing certificate. In
+order to do that you will need Network Security Services ("nss") and Netscape
+Portable Runtime ("nspr"). If you are running debian, you can do:
+
+  apt install libnss3-dev libnspr4-dev libnss3-tools
+
+Initialize some variables:
+
+  CERTDIR=/path/to/cert/dir
+  CERTNICK=myCertificateNickname
+
+Initialize the certificate database:
+
+  certutil -N -d ${CERTDIR}
+
+Generate a signing certificate:
+
+  signtool -G ${CERTNICK} -d ${CERTDIR} -p"<password>"
+
 XPI Package
 -----------
 
-- 
cgit v1.2.3