So, I have created my own little CA for my own purposes (inside my network, etc) and I know that the setup works (I can directly import the key into applications, and they connect to the server using the key fine).
But! When I tried to import the CA Certificate so that all applications can use it, they don't (firefox and chromium)
Placed the cacert.pem in /etc/ssl/certs and ran update-ca-certificates and dpkg-reconfigure ca-certificates
Directly placed the cert inside the ca-certificates.crt file (As it wasn't being placed in there inspite of the previous commands)
Ubuntu Desktop, 12.04 x64
-----BEGIN CERTIFICATE----- MIIDCDCCAnG--snip--8guKJUzT -----END CERTIFICATE-----
openssl x509 -in cacert.pem -noout -text
Certificate: Data: Version: 3 (0x2) Serial Number: 1xxxxxxxxxxxxxxxxxx3 (0xXXXXXXXXXXXXXX9) Signature Algorithm: sha1WithRSAEncryption Issuer: C=AU, ST=Western Australia, L=xx, O=xx, OU=Webmasters, CN=haven/emailAddress=xx Validity Not Before: Dec 8 11:47:37 2012 GMT Not After : Dec 6 11:47:37 2022 GMT Subject: C=AU, ST=Western Australia, L=xx, O=xx, OU=Webmasters, CN=haven/emailAddress=xx Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (1024 bit) Modulus: 00:xx:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:xx:95 X509v3 Authority Key Identifier: keyid:38:xx:95 X509v3 Basic Constraints: CA:TRUE Signature Algorithm: sha1WithRSAEncryption 7b:xx:d3
Thanks in advance!