Ubuntu: How do I install a root certificate?
Question: Can anyone point me to a good tutorial on installing a root certificate on
ubuntu 10 or 11?
I've been provided with a .crt file. I gather that need to create a directory
at /usr/share/ca-certificates/newdomain.org and place the .crt in that
directory. Beyond that I'm not sure how to proceed.
Solutions Sample (Please watch the whole video to see all solutions, in order of how many people found them helpful):
== This solution helped 168 people ==
Given a CA certificate file 'foo.crt', follow these steps to install it on
Ubuntu:
First, copy your CA to dir /usr/local/share/ca-certificates/
sudo cp foo.crt /usr/local/share/ca-certificates/foo.crt
then, update CA store
sudo update-ca-certificates
That's all. You should get this output:
Updating certificates in /etc/ssl/certs... 1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....
Adding debian:foo.pem
done.
done.
No file is needed to edit. Link to your CA is created automatically.
Please note that the certificate filenames have to end in .crt, otherwise the
update-ca-certificates script won't pick up on them.
This procedure works also in newer versions: [ Ссылка ]
manpages/xenial/man8/update-ca-certificates.8.html.
== This solution helped 1 person ==
From [ Ссылка ]:
****** Installing the Certificate ******
You can install the key file example.key and certificate file example.crt, or
the certificate file issued by your CA, by running following commands at a
terminal prompt:
sudo cp example.crt /etc/ssl/certs
sudo cp example.key /etc/ssl/private
Now simply configure any applications, with the ability to use public-key
cryptography, to use the certificate and key files. For example, Apache can
provide HTTPS, Dovecot can provide IMAPS and POP3S, etc.
== This solution helped 1 person ==
Other answers didn't work for me with Ubuntu 18.04. I passed the certificate
cert in to /etc/ssl/certs/ca-certificates.crt using the following command:
cat YOUR_CERT_HERE.crt ＞＞ /etc/ssl/certs/ca-certificate.crt
== This solution helped 253 people ==
****** Installing a root/CA Certificate ******
Given a CA certificate file foo.crt, follow these steps to install it on
Ubuntu:
1. Create a directory for extra CA certificates in /usr/share/ca-
certificates:
sudo mkdir /usr/share/ca-certificates/extra
2. Copy the CA .crt file to this directory:
sudo cp foo.crt /usr/share/ca-certificates/extra/foo.crt
3. Let Ubuntu add the .crt file's path relative to /usr/share/ca-
certificates to /etc/ca-certificates.conf:
sudo dpkg-reconfigure ca-certificates
To do this non-interactively, run:
sudo update-ca-certificates
In case of a .pem file on Ubuntu, it must first be converted to a .crt file:
openssl x509 -in foo.pem -inform PEM -out foo.crt
== This solution helped 3 people ==
Have the (root / CA) certificate available on a web server, local to your
network if you like.
* Browse to it with Firefox.
* Open the cert and tell Firefox to add it as an exception.
* Firefox will ask you whether you want to trust this certificate for
identifying websites, for e-mail users or for software publishers.
* Enjoy!
Update: It will be necessary to check if this works on Ubuntu 11. I've realised
that I just did this on Ubuntu 12.04 LTS.
With thanks & praise to God! With thanks to all the many who have made this project possible! | Content (except music & images) licensed under cc by-sa 3.0 | Music & music license: [ Ссылка ] | Images & images license: [ Ссылка ] and others | With thanks to user Zzzach... ([ Ссылка ]), user Sparky1 ([ Ссылка ]), user scandar ([ Ссылка ]), user jat255 ([ Ссылка ]), user Jasmit Tarang ([ Ссылка ]), user Ian Green ([ Ссылка ]), user Frantisek Boranek ([ Ссылка ]), user Franc Drobnič ([ Ссылка ]), user esilver ([ Ссылка ]), user Eliah Kagan ([ Ссылка ]), user Braiam ([ Ссылка ]), user Bai ([ Ссылка ]), user A. Bello ([ Ссылка ]), and the Stack Exchange Network ([ Ссылка ]). Trademarks are property of their respective owners. Disclaimer: All information is provided "AS IS" without warranty of any kind. You are responsible for your own actions. Please contact me if anything should be amiss at Roel D.OT VandePaar A.T gmail.com.
