Re: certificate problem on sid
On 2017-03-09 14:17, SZ, Zsolt wrote:
>
> Thanks for your answer György. About MITM. That is what I am afraid of.
>
> I have asked proxy administrator before my email and they do not know
> such settings. I can reach internet only through proxy so proxy is
> mandatory. Do you have any URL how to "extract" my root certificate?
>
> I was able to "extract" some certificates so I am able to connect to
> github with git clone. I got some certificates from my Windows
> machine, probably our root certification as well, and some from my
> Linux machine via openssl s_client. I added crt base64 files to
> /usr/local/share/ca-certificates and run update-ca-certificates
> application. Based on its output it seems that certifications were
> successfully added. But at the same time I am still not able to
> connect any https via Firefox and my dropbox is not able to connect as
> well. So there is still some problem.
Firefox uses its own certificate store regardless of ca-certificates
directory. So if you could add certificate to ca-certificates directory
successfully (e.g wget works well - it uses the system-wide
certificates) then you should add it to Firefox also.
Reply to: