marcelo wrote:
Hi, I want install a certicate .CRT on openSuse 10.1. For example wget can perfectly connect to a page securely with cerfiticate: # wget --ca-certificate=AFIPcerthomo.crt https://wsaahomo.afip.gov.ar/ws/services/LoginCms?wsdl But without certificate: # wget https://wsaahomo.afip.gov.ar/ws/services/LoginCms?wsdl Get the following message error: // BEGIN MENSAJE ------------------------ --10:40:21-- https://wsaahomo.afip.gov.ar/ws/services/LoginCms?wsdl => `LoginCms?wsdl' Resolviendo wsaahomo.afip.gov.ar... 200.1.116.66 Connecting to wsaahomo.afip.gov.ar|200.1.116.66|:443... conectado. ERROR: Certificate verification error for wsaahomo.afip.gov.ar: unable to get local issuer certificate To connect to wsaahomo.afip.gov.ar insecurely, use `--no-check-certificate'. No se pudo establecer la conexión SSL. // END MENSAJE ------------------------
Then HOW can install a certificate en openSuse ???
For example to import a certificate on Fedora 9 is: # openssl x509 -in AFIPcerthomo.crt -text >> /etc/pki/tls/certs/ca-bundle.crt But this file not exist on openSuse. I try to add to /etc/apache2/ssl.crt/ca-bundle.crt on openSuse, but get the same error. Can't conect securely with SSL.
You will probably need to include your RootCA in the trusted issuers section. Your .crt certificate will probably only have the certificate itself and not information about the issuers.
Thanks, Marcelo.
-- Rui Santos http://www.ruisantos.com/ Veni, vidi, Linux! -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org