search

ruebenramirez / blog

My blog
http://blog.ruebenramirez.com/
7 stars 0 forks source link

ubuntu chrome accept self-signed certs #374

Open ruebenramirez opened 7 years ago

ruebenramirez commented 7 years ago

install libss3

sudo apt install libnss3-tools

create a cert db (sqlite)

mkdir -p $HOME/.pki/nssdb
certutil -d $HOME/.pki/nssdb -N

add self signed certs to local db

certutil -d sql:$HOME/.pki/nssdb -A -t "P,," -n <crt_nickname> -i <full_path_to_crt>

sources:

ruebenramirez commented 7 years ago

install ca certs into OS: https://docs.docker.com/registry/insecure/#/docker-still-complains-about-the-certificate-when-using-authentication

debian based distros

$ cp certs/domain.crt /usr/local/share/ca-certificates/myregistrydomain.com.crt
update-ca-certificates

or on EL distros (aka RHEL/CentOS)

cp certs/domain.crt /etc/pki/ca-trust/source/anchors/myregistrydomain.com.crt
update-ca-trust

and make sure ca-trust is enabled:

update-ca-trust enable