CAcert

Differences between revisions 1 and 4 (spanning 3 versions)
Revision 1 as of 2008-08-15 11:48:32
Size: 797
Editor: 212
Comment:
Revision 4 as of 2019-04-15 12:54:01
Size: 1846
Editor: zhangweiwu
Comment: commands has changed. using ubutnu 18.04
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
CAcert is a free (gratis, free of charge) root certificate trusted by [[http://wiki.cacert.org/wiki/CacertSites|many sites]] and [[http://wiki.cacert.org/wiki/InclusionStatus|many distributions and programs]]. There has been [[http://blog.cacert.org/2005/04/4.html|talk about inclusion in ubuntu]] in 2005 in [[https://wiki.ubuntu.com/UbuntuDownUnder/BOFs/CACertInclusion|an UbuntuDownUnder BoF]]. Yet, sadly this has not happened so far. CAcert is a free (gratis, free of charge) root certificate trusted by [[http://wiki.cacert.org/wiki/CacertSites|many sites]] and [[http://wiki.cacert.org/wiki/InclusionStatus|many distributions and programs]]. There has been [[http://blog.cacert.org/2005/04/4.html|talk about inclusion in ubuntu]] in 2005 in [[https://wiki.ubuntu.com/UbuntuDownUnder/BOFs/CACertInclusion|an UbuntuDownUnder BoF]] but ultimately didn't happen.
Line 7: Line 7:
sudo apt-get install ca-certificates sudo apt-get install ca-cacert
Line 10: Line 10:
Then you can activate it in firefox with this command: The file will be installed in
Line 12: Line 12:
firefox /usr/share/ca-certificates/cacert.org/root.crt /usr/share/ca-certificates/CAcert/
Line 15: Line 15:
You can set firefox to accept that the certificate can validate various areas. But you need to manually import it. Firefox used to allow the import to start from command line, but now this has to be done in Preferences -> Advanced -> View Certificates.

##
##You can set firefox to accept that the certificate can validate various areas.

##
## I found this out when trying to get my own Citrix connection working on Ubuntu 10.04.
## The information came from this forum posting, and worked for me in Ubuntu.
## http://forums.opensuse.org/english/get-help-here/applications/422694-citrix-connect-getting-ssl-error-61-a.html
##
If you are still getting a message like '''''You have not chosen to trust "Thwate Premium Server CA"''''' you will need to manually copy the SSL Certificate to the ICAClinet directory.
 1. Go into Firefox → Edit → Preferences → Advanced → View Certificates → Authorities Tab
 1. Find the missing certificate, e.g. Thwate Premium Server CA
 1. Export this Certificate to your hard drive somewhere
 1. Run the following command (''assuming you Exported to your Downloads directory'') to copy the file to the ICAClient directory: {{{
cp ~/Downloads/ThawtePremiumServerCA /usr/lib/ICAClient/keystore/cacerts
}}}

CAcert is a free (gratis, free of charge) root certificate trusted by many sites and many distributions and programs. There has been talk about inclusion in ubuntu in 2005 in an UbuntuDownUnder BoF but ultimately didn't happen.

Procedure

You can manually install the CAcert root certificate with the following command:

sudo apt-get install ca-cacert

The file will be installed in

/usr/share/ca-certificates/CAcert/

But you need to manually import it. Firefox used to allow the import to start from command line, but now this has to be done in Preferences -> Advanced -> View Certificates.

If you are still getting a message like You have not chosen to trust "Thwate Premium Server CA" you will need to manually copy the SSL Certificate to the ICAClinet directory.

  1. Go into Firefox → Edit → Preferences → Advanced → View Certificates → Authorities Tab
  2. Find the missing certificate, e.g. Thwate Premium Server CA
  3. Export this Certificate to your hard drive somewhere
  4. Run the following command (assuming you Exported to your Downloads directory) to copy the file to the ICAClient directory:

    cp ~/Downloads/ThawtePremiumServerCA /usr/lib/ICAClient/keystore/cacerts

CAcert (last edited 2019-04-15 12:54:01 by zhangweiwu)