Need help installing a system wide cert in Ubuntu client


Recommended Posts

  On 10/08/2021 at 03:09, Jim K said:
Expand  

I'm not sure that article is relavent now. I was able to import the unaltered cert into both firefox and chrome, directly from the browsers. No terminal needed.

 

BUT

 

The problem is I think dpi-ssl is causing problems with the package manager. 

 

I'm still learning about this stuff, so apologies for the ignorance. 

Yep, not having the sonciwall cert installed at the system level is causing problems with the update manager when it attempts to pull something down from https. 

 

On Windows, I just double click the cert and click through a couple of choices and its globally installed. Wish it was that easy here, lol.

  On 10/08/2021 at 03:09, Jim K said:
Expand  

Ok, so I actually sat down and followed that guide and it actually worked. Wasn't confident about it cause it was referencing quite an old version of Ubuntu. 

 

Oddly, even though the cert is imported to the OS, you still have to import the same cert into each browser that you plan on using. Importing into the OS only fixes the problem with your package manager/updater pulling down updates. 

 

Thanks for linking to the article!

You really need to READ everything in between the lines in Linux-based stuff.

 

I am not sure what you are doing, but maybe @BudMan can help.

  On 13/08/2021 at 03:34, JustGeorge said:

Ok, so I actually sat down and followed that guide and it actually worked. Wasn't confident about it cause it was referencing quite an old version of Ubuntu. 

 

Oddly, even though the cert is imported to the OS, you still have to import the same cert into each browser that you plan on using. Importing into the OS only fixes the problem with your package manager/updater pulling down updates. 

 

Thanks for linking to the article!

Expand  

Glad you got it working.  I haven't used Linux in a decade or so ... and the last time I installed certs on Linux was following a "hold your hand" guide when we were moving our PACS from GE to Agfa.  

 

  On 13/08/2021 at 03:34, JustGeorge said:

you still have to import the same cert into each browser that you plan on using

Expand  

That is because the browsers use their own store for the certs they trust vs just using the system store.  Same thing on windows systems.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Larry likes animals.  Mommy acts sh!t
    • vPro is a platform that has features aimed at companies, remote management, security, threats detection, drivers that are stable for 15 months, and many other things. And this includes Core, Core Ultra (which are excellent), and a set of Xeon. And this exists for years, and a Intel platform also includes networking Ethernet and WiFi (this requires years of development), a host of security features, power management, storage technologies, This does not exist in such a complete and coherent platform at AMD… And. please, no Windows 10 PC is going to turn into dust in a second, there is 3 years of extended support… for old laptops, there is no reason not to switch, and that backup feature is unrelated.
    • When will the US stop the monster ? They ###### everyone, customers, victims, employees, all the suppliers: the story behind every hw parts is the same, acquired, outsourced, but poaching employees is the cheapest way. The narrative arcs from the last 15 years, all partially or entirely deceptive: security (they stopped with that one, not sustainable), privacy, with the secure cloud ahah, the local AI ahah, selling the user base to Google, ahah, that’s the privacy you will enjoy. Innovations, it became a running gag, when everything is average and years late. The competition: on macOs all their crappy services, 20 apps, that you cannot even hide. They have business practices that no other company could adopt, they would be sued, Apple, on a pedestal for being the greatest parasite company (they capture a lot of wealth, give nothing back, except tens of billion in buybacks every year). Ah, the M socs, they hit a wall (long ago) and still market them as having AAA gaming abilities, they do not, one more fraud. At least there is some fun, Apple building fabs in cooperation with TSMC… ahahahah how are they involved ? Catering ? They provide the cloths ? It’s really sad to see that in the US corruption and mediocrity have reached a level so that companies like Apple or Tesla are getting so much help and support from the administrations, and other entities… that they do not even try to hide today. I wonder when will we know how much the news outlets are being paid to regurgitate anything Apple wants.. This is decay and it’s ugly.
    • it might be a work or school thing. at my work, a disclaimer pops up stating that "you should use google chrome or edge for the best possible experience." at my school, the disclaimer says just to use google chrome. i'm sure a lot of IT guys just want to make it easy and tell employees to use google chrome because of the apparent trends in web developers testing and all. i'm sure that can have big ramifications on browser usage for average users since "if my IT dep permits it, then it's good". i liked that my work also stated Edge, but i've seen "use google chrome" a lot more without mentioning edge. matter of fact, my employer removed firefox from all devices.
  • Recent Achievements

    • Week One Done
      Ricky Chan earned a badge
      Week One Done
    • Week One Done
      maimutza earned a badge
      Week One Done
    • Week One Done
      abortretryfail earned a badge
      Week One Done
    • First Post
      Mr bot earned a badge
      First Post
    • First Post
      Bkl211 earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      483
    2. 2
      +FloatingFatMan
      263
    3. 3
      snowy owl
      240
    4. 4
      ATLien_0
      227
    5. 5
      Edouard
      188
  • Tell a friend

    Love Neowin? Tell a friend!