Allow NSS applications to read the system certificate store

p11-kit.sh

#!/usr/bin/env bash

find / -type f -name "libnssckbi.so" 2>/dev/null | while read line; do
    sudo mv $line ${line}.bak
    sudo ln -s /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so $line
done

sudo mount --bind -o nodev,ro /etc/ssl/certs /snap/core/current/etc/ssl/certs/
sudo mount --bind -o nodev,ro /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /snap/firefox/85/libnssckbi.so