On 11/11/21 3:52 PM, Gerald Wiese wrote:
Dear openSUSE community,
I'm facing issues using self signed certificates on openSUSE Leap 15.3.
I have a certificate 'gnuhealth-selfsigned.crt' in PEM format and a hostname 'susetest'. Actually I want to use the update-ca-certificates command. I tried copying the certificate into /usr/share/pki/trust/anchors/ and /usr/share/pki/trust/ as .crt and renamed to .pem. For all four scenarios the output of 'sudo update-ca-certificates -v' does not contain something like "1 added" and 'wget https://susetest' does still complain about a selfsigned certificate afterwards.
I'm not a certificate expert but that looks OK to me. The YaST registration modules does a certificate import in SLES this way: - Copy the PEM file to /usr/share/pki/trust/anchors/ directory - Run /usr/sbin/update-ca-certificates It should work the same way also in Leap 15.3... -- Ladislav Slezák YaST Developer SUSE LINUX, s.r.o. Corso IIa Křižíkova 148/34 18600 Praha 8