View previous topic :: View next topic |
Author |
Message |
ROGA Apprentice
Joined: 17 Feb 2018 Posts: 158 Location: Zurich, Switzerland
|
Posted: Tue Feb 18, 2020 10:38 am Post subject: [SOLVED] add or import a CA Certificate doesn't work |
|
|
Hi,
I try to add or import a root-ca-certificate to my linux box. I copied the root-ca-certificate to /usr/share/ca-certificates and after that run the command update-ca-certificates. Unfortunately nothing is happens. The root-ca-certificate came from my windows 10 certification store and I exported it as a base64 encoded X.509 file. I than converted it with openssl
Code: | openssl x509 -in certificatename.cer -outform PEM -out certificatename.pem |
Code: | root@gentoo ~ # update-ca-certificates
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done. |
Can anybody help me? _________________ regards,
Roland
Last edited by ROGA on Thu Feb 20, 2020 11:28 am; edited 1 time in total |
|
Back to top |
|
|
fedeliallalinea Administrator
Joined: 08 Mar 2003 Posts: 30917 Location: here
|
Posted: Tue Feb 18, 2020 12:54 pm Post subject: |
|
|
You are sure that in /usr/share/ca-certificates (better is /usr/local/share/ca-certificates) you should put pem and not crt?
If you look in /usr/share/ca-certificates/mozilla there are only crt certificates _________________ Questions are guaranteed in life; Answers aren't. |
|
Back to top |
|
|
guitou Guru
Joined: 02 Oct 2003 Posts: 534 Location: France
|
Posted: Tue Feb 18, 2020 12:54 pm Post subject: |
|
|
Hello.
/usr/share/ca-certificates is for certs coming from the package, you should set yours in /usr/local/share/ca-certificates instead.
++
Gi)
Edit: pas assez rapide petit scarabée! |
|
Back to top |
|
|
ROGA Apprentice
Joined: 17 Feb 2018 Posts: 158 Location: Zurich, Switzerland
|
Posted: Thu Feb 20, 2020 11:28 am Post subject: |
|
|
Hi guitou and fedeliallalinea,
thank you very much! You are both right!
I have to put the certs in /usr/local/share/ca-certificates rather then in /usr/share/ca-certificates. But this directories dosn't exists on my gentoo linux box. I had to create the directory share and the subfolder ca-certificates. Then, after running update-ca-certificates[/i] my new certs was added.
Code: |
gentoobox ~/Certificates # update-ca-certificates
Updating certificates in /etc/ssl/certs...
2 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
|
_________________ regards,
Roland |
|
Back to top |
|
|
|