Tìm kiếm hỗ trợ

Tránh các lừa đảo về hỗ trợ. Chúng tôi sẽ không bao giờ yêu cầu bạn gọi hoặc nhắn tin đến số điện thoại hoặc chia sẻ thông tin cá nhân. Vui lòng báo cáo hoạt động đáng ngờ bằng cách sử dụng tùy chọn "Báo cáo lạm dụng".

Learn More

Installing root CA certificates

  • 4 trả lời
  • 0 gặp vấn đề này
  • 453 lượt xem
  • Trả lời mới nhất được viết bởi Dropa

more options

I'm stetting up a testing environment. It's a closed environment with no access to the Internet when it's in use.

The environment is launched from AWS and consists of an Ubuntu 18 desktop and a Ubuntu Server running Apache. The desktop is able to successfully load the website, but with a cert error that the certificate isn't trusted.

When the Ubuntu Desktop launches, it has a fresh install of Firefox, and therefore all the directories in the users home folder are not yet setup for Firefox, including the database where the root CAs are stored.

I'm am able to add the Root CA certificate into the Firefox cert database AFTER the machine fully boots and I run Firefox for the first time. I'm using the 'certutil' package to do this. After I load Firefox, then add the root CA certificate using certutil, I'm able to load the website without error.

I need to add this certificate to the database with the startup shell script for the machine.

Any help is greatly appreciated. Here's the commands I'm using:

  1. copy the CA cert into firefox

export ffcerts=`ls /home/testuser/.mozilla/firefox/ | grep default-release` sudo certutil -A -n "testcert" -t "TC,," -i /home/testuser/certificates/testcertCA.pem -d sql:/home/testuser/.mozilla/firefox/$ffcerts

These commands work perfectly after Firefox is run for the first time. I've even tried adding 'Firefox' (with several different switches) into my startup script without success.

I'm stetting up a testing environment. It's a closed environment with no access to the Internet when it's in use. The environment is launched from AWS and consists of an Ubuntu 18 desktop and a Ubuntu Server running Apache. The desktop is able to successfully load the website, but with a cert error that the certificate isn't trusted. When the Ubuntu Desktop launches, it has a fresh install of Firefox, and therefore all the directories in the users home folder are not yet setup for Firefox, including the database where the root CAs are stored. I'm am able to add the Root CA certificate into the Firefox cert database AFTER the machine fully boots and I run Firefox for the first time. I'm using the 'certutil' package to do this. After I load Firefox, then add the root CA certificate using certutil, I'm able to load the website without error. I need to add this certificate to the database with the startup shell script for the machine. Any help is greatly appreciated. Here's the commands I'm using: #copy the CA cert into firefox export ffcerts=`ls /home/testuser/.mozilla/firefox/ | grep default-release` sudo certutil -A -n "testcert" -t "TC,," -i /home/testuser/certificates/testcertCA.pem -d sql:/home/testuser/.mozilla/firefox/$ffcerts These commands work perfectly after Firefox is run for the first time. I've even tried adding 'Firefox' (with several different switches) into my startup script without success.

Được chỉnh sửa bởi goriest-02-stacker vào

Giải pháp được chọn

Thank you very much.

I'm generally a network engineer and not a sys-admin nor developer. I notice this is not so much a guide, but a detailed reference for an experienced user.

I'll do my best to make sense of it, and do some searches to see if I can learn how to apply this correctly. If there is a guide on how to implement this, I'd be very grateful.

Đọc câu trả lời này trong ngữ cảnh 👍 1

Tất cả các câu trả lời (4)

more options

There is a policy available to install a certificate.

more options

Giải pháp được chọn

Thank you very much.

I'm generally a network engineer and not a sys-admin nor developer. I notice this is not so much a guide, but a detailed reference for an experienced user.

I'll do my best to make sense of it, and do some searches to see if I can learn how to apply this correctly. If there is a guide on how to implement this, I'd be very grateful.

more options

Thanks. After parsing through the information I was able to successfully add my certificate.

thank you.

more options

Also post that to a Ubuntu forum as well since that could be O/S related.