CAcert

Differences between revisions 3 and 4
⇤ ← Revision 3 as of 2010-10-07 17:28:23 →
Size: 1726
Editor: corpnet
Comment: Adding manually copying the SSL Certificate
← Revision 4 as of 2019-04-15 12:54:01 → ⇥
Size: 1846
Editor: zhangweiwu
Comment: commands has changed. using ubutnu 18.04
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
CAcert is a free (gratis, free of charge) root certificate trusted by [[http://wiki.cacert.org/wiki/CacertSites|many sites]] and [[http://wiki.cacert.org/wiki/InclusionStatus|many distributions and programs]]. There has been [[http://blog.cacert.org/2005/04/4.html|talk about inclusion in ubuntu]] in 2005 in [[https://wiki.ubuntu.com/UbuntuDownUnder/BOFs/CACertInclusion|an UbuntuDownUnder BoF]]. Yet, sadly this has not happened so far. CAcert is a free (gratis, free of charge) root certificate trusted by [[http://wiki.cacert.org/wiki/CacertSites|many sites]] and [[http://wiki.cacert.org/wiki/InclusionStatus|many distributions and programs]]. There has been [[http://blog.cacert.org/2005/04/4.html|talk about inclusion in ubuntu]] in 2005 in [[https://wiki.ubuntu.com/UbuntuDownUnder/BOFs/CACertInclusion|an UbuntuDownUnder BoF]] but ultimately didn't happen.
Line 7: Line 7:
sudo apt-get install ca-certificates sudo apt-get install ca-cacert
Line 10: Line 10:
Then you can activate it in firefox with this command: The file will be installed in
Line 12: Line 12:
firefox /usr/share/ca-certificates/cacert.org/*.crt /usr/share/ca-certificates/CAcert/
Line 14: Line 14:

But you need to manually import it. Firefox used to allow the import to start from command line, but now this has to be done in Preferences -> Advanced -> View Certificates.

CAcert is a free (gratis, free of charge) root certificate trusted by many sites and many distributions and programs. There has been talk about inclusion in ubuntu in 2005 in an UbuntuDownUnder BoF but ultimately didn't happen.

Procedure

You can manually install the CAcert root certificate with the following command: 

sudo apt-get install ca-cacert

The file will be installed in 

/usr/share/ca-certificates/CAcert/

But you need to manually import it. Firefox used to allow the import to start from command line, but now this has to be done in Preferences -> Advanced -> View Certificates.

If you are still getting a message like You have not chosen to trust "Thwate Premium Server CA" you will need to manually copy the SSL Certificate to the ICAClinet directory.

  1. Go into Firefox → Edit → Preferences → Advanced → View Certificates → Authorities Tab
  2. Find the missing certificate, e.g. Thwate Premium Server CA
  3. Export this Certificate to your hard drive somewhere

  4. Run the following command (assuming you Exported to your Downloads directory) to copy the file to the ICAClient directory: 

    cp ~/Downloads/ThawtePremiumServerCA /usr/lib/ICAClient/keystore/cacerts

CAcert (last edited 2019-04-15 12:54:01 by zhangweiwu)