How to manage imported certificates?
I've got a X.509 certificate file (with a .der file extension) of a certificate authority that I want to trust (it's required to connect to my academic network). When I double-click on a .der file I can either import that certificate to the Gnome2 Key Storage or User Key Storage (by the way, what's the difference between those two?).
My question is, where these certificates are stored? I've check /etc/ssl/certs folder but I couldn't find the one that I've just imported. Also, how I can manage certificates after being imported (list them and remove)?
storage certificates
asked Sep 30 '13 at 20:21
falconeplfalconepl
23829
add a comment |
I've got a X.509 certificate file (with a .der file extension) of a certificate authority that I want to trust (it's required to connect to my academic network). When I double-click on a .der file I can either import that certificate to the Gnome2 Key Storage or User Key Storage (by the way, what's the difference between those two?).
My question is, where these certificates are stored? I've check /etc/ssl/certs folder but I couldn't find the one that I've just imported. Also, how I can manage certificates after being imported (list them and remove)?
storage certificates
asked Sep 30 '13 at 20:21
falconeplfalconepl
23829
add a comment |
I've got a X.509 certificate file (with a .der file extension) of a certificate authority that I want to trust (it's required to connect to my academic network). When I double-click on a .der file I can either import that certificate to the Gnome2 Key Storage or User Key Storage (by the way, what's the difference between those two?).
My question is, where these certificates are stored? I've check /etc/ssl/certs folder but I couldn't find the one that I've just imported. Also, how I can manage certificates after being imported (list them and remove)?
storage certificates
asked Sep 30 '13 at 20:21
falconeplfalconepl
23829
I've got a X.509 certificate file (with a .der file extension) of a certificate authority that I want to trust (it's required to connect to my academic network). When I double-click on a .der file I can either import that certificate to the Gnome2 Key Storage or User Key Storage (by the way, what's the difference between those two?).
My question is, where these certificates are stored? I've check /etc/ssl/certs folder but I couldn't find the one that I've just imported. Also, how I can manage certificates after being imported (list them and remove)?
storage certificates
storage certificates
asked Sep 30 '13 at 20:21
falconeplfalconepl
23829
asked Sep 30 '13 at 20:21
falconeplfalconepl
23829
asked Sep 30 '13 at 20:21
falconeplfalconepl
23829
asked Sep 30 '13 at 20:21
falconeplfalconepl
23829
asked Sep 30 '13 at 20:21
falconeplfalconepl
23829
23829
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
You need to install the certificate in /etc/ssl/certs/ manually. Additionally, you will want to add it to /etc/ssl/certs/ca-certificates.crt for applications that cannot deal with the directory format. For this, you first need to convert it from DER to PEM:
openssl x509 -in foo.der -inform der -out foo.pem
Then you install it into the system-wide certificate storage:
sudo openssl x509 -in foo.pem -out /etc/ssl/certs/$(openssl x509 -in foo.pem -noout -hash).0
sudo sh -c 'cat foo.pem >>/etc/ssl/certs/ca-certificates.crt'
answered Mar 1 '14 at 23:04
mirabilosmirabilos
466516
Thanks, but actually, I don't think it is an answer to my question. I know I can import certificates in a way that you've described, but I was wondering, what exactly happens to a.dercertificate when trying to import it by a double click (GUI way). Especially, where it is stored.
– falconepl
Mar 18 '14 at 21:36
1
Oh, okay. For that, you need to figure out which actual program is acting on the double click (this used to be the file manager of your desktop environment, but has become more complicated), and what actions it does (those days, this usually involves divining MIME types and looking through *.desktop files). Sorry, I'm a bit lost with today's GUIs.
– mirabilos
Mar 18 '14 at 22:01
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f352015%2fhow-to-manage-imported-certificates%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You need to install the certificate in /etc/ssl/certs/ manually. Additionally, you will want to add it to /etc/ssl/certs/ca-certificates.crt for applications that cannot deal with the directory format. For this, you first need to convert it from DER to PEM:
openssl x509 -in foo.der -inform der -out foo.pem
Then you install it into the system-wide certificate storage:
sudo openssl x509 -in foo.pem -out /etc/ssl/certs/$(openssl x509 -in foo.pem -noout -hash).0
sudo sh -c 'cat foo.pem >>/etc/ssl/certs/ca-certificates.crt'
answered Mar 1 '14 at 23:04
mirabilosmirabilos
466516
Thanks, but actually, I don't think it is an answer to my question. I know I can import certificates in a way that you've described, but I was wondering, what exactly happens to a.dercertificate when trying to import it by a double click (GUI way). Especially, where it is stored.
– falconepl
Mar 18 '14 at 21:36
1
Oh, okay. For that, you need to figure out which actual program is acting on the double click (this used to be the file manager of your desktop environment, but has become more complicated), and what actions it does (those days, this usually involves divining MIME types and looking through *.desktop files). Sorry, I'm a bit lost with today's GUIs.
– mirabilos
Mar 18 '14 at 22:01
add a comment |
You need to install the certificate in /etc/ssl/certs/ manually. Additionally, you will want to add it to /etc/ssl/certs/ca-certificates.crt for applications that cannot deal with the directory format. For this, you first need to convert it from DER to PEM:
openssl x509 -in foo.der -inform der -out foo.pem
Then you install it into the system-wide certificate storage:
sudo openssl x509 -in foo.pem -out /etc/ssl/certs/$(openssl x509 -in foo.pem -noout -hash).0
sudo sh -c 'cat foo.pem >>/etc/ssl/certs/ca-certificates.crt'
answered Mar 1 '14 at 23:04
mirabilosmirabilos
466516
Thanks, but actually, I don't think it is an answer to my question. I know I can import certificates in a way that you've described, but I was wondering, what exactly happens to a.dercertificate when trying to import it by a double click (GUI way). Especially, where it is stored.
– falconepl
Mar 18 '14 at 21:36
1
Oh, okay. For that, you need to figure out which actual program is acting on the double click (this used to be the file manager of your desktop environment, but has become more complicated), and what actions it does (those days, this usually involves divining MIME types and looking through *.desktop files). Sorry, I'm a bit lost with today's GUIs.
– mirabilos
Mar 18 '14 at 22:01
add a comment |
You need to install the certificate in /etc/ssl/certs/ manually. Additionally, you will want to add it to /etc/ssl/certs/ca-certificates.crt for applications that cannot deal with the directory format. For this, you first need to convert it from DER to PEM:
openssl x509 -in foo.der -inform der -out foo.pem
Then you install it into the system-wide certificate storage:
sudo openssl x509 -in foo.pem -out /etc/ssl/certs/$(openssl x509 -in foo.pem -noout -hash).0
sudo sh -c 'cat foo.pem >>/etc/ssl/certs/ca-certificates.crt'
answered Mar 1 '14 at 23:04
mirabilosmirabilos
466516
You need to install the certificate in /etc/ssl/certs/ manually. Additionally, you will want to add it to /etc/ssl/certs/ca-certificates.crt for applications that cannot deal with the directory format. For this, you first need to convert it from DER to PEM:
openssl x509 -in foo.der -inform der -out foo.pem
Then you install it into the system-wide certificate storage:
sudo openssl x509 -in foo.pem -out /etc/ssl/certs/$(openssl x509 -in foo.pem -noout -hash).0
sudo sh -c 'cat foo.pem >>/etc/ssl/certs/ca-certificates.crt'
answered Mar 1 '14 at 23:04
mirabilosmirabilos
466516
answered Mar 1 '14 at 23:04
mirabilosmirabilos
466516
answered Mar 1 '14 at 23:04
mirabilosmirabilos
466516
answered Mar 1 '14 at 23:04
mirabilosmirabilos
466516
466516
Thanks, but actually, I don't think it is an answer to my question. I know I can import certificates in a way that you've described, but I was wondering, what exactly happens to a.dercertificate when trying to import it by a double click (GUI way). Especially, where it is stored.
– falconepl
Mar 18 '14 at 21:36
1
Oh, okay. For that, you need to figure out which actual program is acting on the double click (this used to be the file manager of your desktop environment, but has become more complicated), and what actions it does (those days, this usually involves divining MIME types and looking through *.desktop files). Sorry, I'm a bit lost with today's GUIs.
– mirabilos
Mar 18 '14 at 22:01
add a comment |
Thanks, but actually, I don't think it is an answer to my question. I know I can import certificates in a way that you've described, but I was wondering, what exactly happens to a.dercertificate when trying to import it by a double click (GUI way). Especially, where it is stored.
– falconepl
Mar 18 '14 at 21:36
1
Oh, okay. For that, you need to figure out which actual program is acting on the double click (this used to be the file manager of your desktop environment, but has become more complicated), and what actions it does (those days, this usually involves divining MIME types and looking through *.desktop files). Sorry, I'm a bit lost with today's GUIs.
– mirabilos
Mar 18 '14 at 22:01
Thanks, but actually, I don't think it is an answer to my question. I know I can import certificates in a way that you've described, but I was wondering, what exactly happens to a
.der certificate when trying to import it by a double click (GUI way). Especially, where it is stored.– falconepl
Mar 18 '14 at 21:36
Thanks, but actually, I don't think it is an answer to my question. I know I can import certificates in a way that you've described, but I was wondering, what exactly happens to a
.der certificate when trying to import it by a double click (GUI way). Especially, where it is stored.– falconepl
Mar 18 '14 at 21:36
1
1
Oh, okay. For that, you need to figure out which actual program is acting on the double click (this used to be the file manager of your desktop environment, but has become more complicated), and what actions it does (those days, this usually involves divining MIME types and looking through *.desktop files). Sorry, I'm a bit lost with today's GUIs.
– mirabilos
Mar 18 '14 at 22:01
Oh, okay. For that, you need to figure out which actual program is acting on the double click (this used to be the file manager of your desktop environment, but has become more complicated), and what actions it does (those days, this usually involves divining MIME types and looking through *.desktop files). Sorry, I'm a bit lost with today's GUIs.
– mirabilos
Mar 18 '14 at 22:01
add a comment |
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f352015%2fhow-to-manage-imported-certificates%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
