CAcert

Differences between revisions 2 and 3
⇤ ← Revision 2 as of 2008-08-15 11:53:20 →
Size: 794
Editor: 212
Comment:
← Revision 3 as of 2010-10-07 17:28:23 → ⇥
Size: 1726
Editor: corpnet
Comment: Adding manually copying the SSL Certificate
Deletions are marked like this. Additions are marked like this.
Line 14: Line 14:
##
##You can set firefox to accept that the certificate can validate various areas.
Line 15: Line 17:
You can set firefox to accept that the certificate can validate various areas. ##
## I found this out when trying to get my own Citrix connection working on Ubuntu 10.04.
## The information came from this forum posting, and worked for me in Ubuntu.
## http://forums.opensuse.org/english/get-help-here/applications/422694-citrix-connect-getting-ssl-error-61-a.html
##
If you are still getting a message like '''''You have not chosen to trust "Thwate Premium Server CA"''''' you will need to manually copy the SSL Certificate to the ICAClinet directory.
 1. Go into Firefox → Edit → Preferences → Advanced → View Certificates → Authorities Tab
 1. Find the missing certificate, e.g. Thwate Premium Server CA
 1. Export this Certificate to your hard drive somewhere
 1. Run the following command (''assuming you Exported to your Downloads directory'') to copy the file to the ICAClient directory: {{{
cp ~/Downloads/ThawtePremiumServerCA /usr/lib/ICAClient/keystore/cacerts
}}}

CAcert is a free (gratis, free of charge) root certificate trusted by many sites and many distributions and programs. There has been talk about inclusion in ubuntu in 2005 in an UbuntuDownUnder BoF. Yet, sadly this has not happened so far.

Procedure

You can manually install the CAcert root certificate with the following command: 

sudo apt-get install ca-certificates

Then you can activate it in firefox with this command: 

firefox /usr/share/ca-certificates/cacert.org/*.crt

If you are still getting a message like You have not chosen to trust "Thwate Premium Server CA" you will need to manually copy the SSL Certificate to the ICAClinet directory.

  1. Go into Firefox → Edit → Preferences → Advanced → View Certificates → Authorities Tab
  2. Find the missing certificate, e.g. Thwate Premium Server CA
  3. Export this Certificate to your hard drive somewhere

  4. Run the following command (assuming you Exported to your Downloads directory) to copy the file to the ICAClient directory: 

    cp ~/Downloads/ThawtePremiumServerCA /usr/lib/ICAClient/keystore/cacerts

CAcert (last edited 2019-04-15 12:54:01 by zhangweiwu)