Add support for Chromium Snap cert trust (#57257)

I thought this already worked, but it turns out it behaves differently depending on how you launch it.  When it is launched as a snap (vs from the command line), it can only access things in its own folder, so it looks in a different NSS DB for trusted certs.  Fixing this is as simple as adding one more well-known location to the list.

Co-authored-by: Andrew Casey <[email protected]>

Author: github-actions[bot]

src/Shared/CertificateGeneration/UnixCertificateManager.cs

@@ -476,6 +476,11 @@ private static string GetChromiumNssDb(string homeDirectory)
         return Path.Combine(homeDirectory, ".pki", "nssdb");
     }
 
+    private static string GetChromiumSnapNssDb(string homeDirectory)
+    {
+        return Path.Combine(homeDirectory, "snap", "chromium", "current", ".pki", "nssdb");
+    }
+
     private static string GetFirefoxDirectory(string homeDirectory)
     {
         return Path.Combine(homeDirectory, ".mozilla", "firefox");
@@ -732,13 +737,21 @@ private static List<NssDb> GetNssDbs(string homeDirectory)
             return nssDbs;
         }
 
-        // Chrome, Chromium, Edge, and their respective snaps all use this directory
+        // Chrome, Chromium, and Edge all use this directory
         var chromiumNssDb = GetChromiumNssDb(homeDirectory);
         if (Directory.Exists(chromiumNssDb))
         {
             nssDbs.Add(new NssDb(chromiumNssDb, isFirefox: false));
         }
 
+        // Chromium Snap, when launched under snap confinement, uses this directory
+        // (On Ubuntu, the GUI launcher uses confinement, but the terminal does not)
+        var chromiumSnapNssDb = GetChromiumSnapNssDb(homeDirectory);
+        if (Directory.Exists(chromiumSnapNssDb))
+        {
+            nssDbs.Add(new NssDb(chromiumSnapNssDb, isFirefox: false));
+        }
+
         var firefoxDir = GetFirefoxDirectory(homeDirectory);
         if (Directory.Exists(firefoxDir))
         {