try installing in NSS shared DB

.github/workflows/test-browser.yml

@@ -58,6 +58,14 @@ jobs:
       - name: Install NSS tools
         run: sudo apt install libnss3-tools
 
+        # This works for Chromium (see https://chromium.googlesource.com/chromium/src/+/master/docs/linux/cert_management.md)
+        # Note this is the same command that we use for adding it to the Firefox profile (see playwrightHelpers.js)
+        # TODO does it work for WebKit?
+      - name: Install mitmproxy root CA in NSS shared DB
+        run: |
+          mkdir -p ~/.pki/nssdb
+          certutil -A -d sql:$HOME/.pki/nssdb -t C -n "Mitmproxy Root Cert" -i ~/.mitmproxy/mitmproxy-ca-cert.pem
+
       - name: Run the tests
         env:
           PLAYWRIGHT_BROWSER: ${{ matrix.browser }}

test/support/playwrightHelpers.js

@@ -37,10 +37,10 @@ async function openPlaywrightBrowser(headless) {
         `certutil -A -d ${profileDirectory} -t C -n "Mitmproxy Root Cert" -i ~/.mitmproxy/mitmproxy-ca-cert.pem`,
       );
       break;
-    default:
-      // TODO chromium, webkit
-      // Bear in mind that on a developer’s machine we don’t really want to install any root CA certs that will have a global effect; keep it localised to the
-      throw new Error(`Don’t yet know how to install root CA cert for browser ${browserEnv}`);
+    //default:
+    //// TODO chromium, webkit
+    //// Bear in mind that on a developer’s machine we don’t really want to install any root CA certs that will have a global effect; keep it localised to the
+    //throw new Error(`Don’t yet know how to install root CA cert for browser ${browserEnv}`);
   }
 
   const options = {