Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[SOLVED] add or import a CA Certificate doesn't work
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
ROGA
Apprentice
Apprentice


Joined: 17 Feb 2018
Posts: 158
Location: Zurich, Switzerland

PostPosted: Tue Feb 18, 2020 10:38 am    Post subject: [SOLVED] add or import a CA Certificate doesn't work Reply with quote

Hi,

I try to add or import a root-ca-certificate to my linux box. I copied the root-ca-certificate to /usr/share/ca-certificates and after that run the command update-ca-certificates. Unfortunately nothing is happens. The root-ca-certificate came from my windows 10 certification store and I exported it as a base64 encoded X.509 file. I than converted it with openssl

Code:
openssl x509 -in certificatename.cer -outform PEM -out certificatename.pem


Code:
root@gentoo ~ # update-ca-certificates
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.


Can anybody help me?
_________________
regards,

Roland


Last edited by ROGA on Thu Feb 20, 2020 11:28 am; edited 1 time in total
Back to top
View user's profile Send private message
fedeliallalinea
Administrator
Administrator


Joined: 08 Mar 2003
Posts: 30917
Location: here

PostPosted: Tue Feb 18, 2020 12:54 pm    Post subject: Reply with quote

You are sure that in /usr/share/ca-certificates (better is /usr/local/share/ca-certificates) you should put pem and not crt?
If you look in /usr/share/ca-certificates/mozilla there are only crt certificates
_________________
Questions are guaranteed in life; Answers aren't.
Back to top
View user's profile Send private message
guitou
Guru
Guru


Joined: 02 Oct 2003
Posts: 534
Location: France

PostPosted: Tue Feb 18, 2020 12:54 pm    Post subject: Reply with quote

Hello.

/usr/share/ca-certificates is for certs coming from the package, you should set yours in /usr/local/share/ca-certificates instead.

++
Gi)

Edit: pas assez rapide petit scarabée!
Back to top
View user's profile Send private message
ROGA
Apprentice
Apprentice


Joined: 17 Feb 2018
Posts: 158
Location: Zurich, Switzerland

PostPosted: Thu Feb 20, 2020 11:28 am    Post subject: Reply with quote

Hi guitou and fedeliallalinea,

thank you very much! You are both right!

I have to put the certs in /usr/local/share/ca-certificates rather then in /usr/share/ca-certificates. But this directories dosn't exists on my gentoo linux box. I had to create the directory share and the subfolder ca-certificates. Then, after running update-ca-certificates[/i] my new certs was added.
Code:

gentoobox ~/Certificates # update-ca-certificates
Updating certificates in /etc/ssl/certs...
2 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.

_________________
regards,

Roland
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum