[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Add my CA cert in trusted certs



* Миша <aleksmisha991@gmail.com> [2021-06-15 08:42]:
Hello! I would like you to add my certification authority in the list of trusted certs
TL;DR: No

First of all, you should probably use LetsEncrypt [1].

If you just want to play around and learn, you can add your CA cert
locally: just put it into /usr/local/share/ca-certificates and run
"update-ca-certificates" [2]. Your browser will probably have its
own list, so you'll have to add it there, too. If you don't know
how, you can find tutorials on the web.

And if you actually, really want to be a publicly trusted CA, you
must, at the very least, adhere to the CA/Browser Forum baseline
requirements [3]. This is neither easy nor cheap, and we cannot help
you with that either.

- Timo

[1] https://letsencrypt.org/
[2] https://manpages.debian.org/unstable/ca-certificates/update-ca-certificates.8.en.html
[3] https://cabforum.org/baseline-requirements-documents/

--
⢀⣴⠾⠻⢶⣦⠀   ╭────────────────────────────────────────────────────╮
⣾⠁⢠⠒⠀⣿⡁   │ Timo Röhling                                       │
⢿⡄⠘⠷⠚⠋⠀   │ 9B03 EBB9 8300 DF97 C2B1  23BF CC8C 6BDD 1403 F4CA │
⠈⠳⣄⠀⠀⠀⠀   ╰────────────────────────────────────────────────────╯

Attachment: signature.asc
Description: PGP signature


Reply to: