|
I have a bunch of machines that need to fetch https: off a server (or collection of servers). I'm operating a CA and self-signing the certificates on the server(s). The client machines are running ubuntu. Some of the fetches are via apt, some via wget. How do I install the CA's certificate on the clients so that all of its certs are recognized without warnings or errors? (Just the directory location is sufficient, I'll package it in an appropriate way.) Thanks.
| |||
|
feedback
|
|
Copying the *.pem file for your certification authority to /etc/ssl/certs/ should do the trick. | |||
|
feedback
|
|
You'll have to copy the certificate of the root CA to the /etc/ssl/certs directory in PEM format. Then you must run the update-ca-certificates script which will add the certificate to the certificate bundle (/etc/ssl/certs/ca-certificates.crt) and make the symlink from the file to its hash value. | |||
|
feedback
|
|
Not what you asked, but I recommend www.cacert.org for certs. It's free but installed by default in all browsers. It is in more browsers than your self-signed cert though. | |||
feedback
|
