2

This answer works nice for establishing webdav or webdavs connections with nautilus.

However, when I try this on a webdav share secured with a self-signed TLS client certificate authentication, I get:

First:

The signing certificate authority is not known.
Certificate information:
....
Are you really sure you would like to continue?

And after I click on yes:

...Unhandled error message: HTTP Error: Error performing TLS handshake: A TLS fatal allert has been received.

...and I am never asked for a client certificate. I am on Ubuntu 16.04 with Unity and would preferably like this to work with Nautilus. I need instructions including the installation of the client certificate (and the CA authority).

PS: This question seems related (not identical), but has no answer either.

  • whats the CA signing this certificate ? – Amias Jun 7 '16 at 15:29
  • @amiaschanner It is the company I work for (so I would have to install the CA.crt file also). I have not done this. However, in firefox the CA.crt and the client certificate work as they do on win with WebDrive (just mentioning that to clarify that there is no problem with the certificates) – Bruni Jun 7 '16 at 15:33
2

One solution that worked, is using davfs.

Installation

Install davfs

sudo apt-get install davfs2

Configuration

then copy the certificate from the CA (in pem format) to /ect/davfs2/certs and the client certificate (in .p12 format) to /ect/davfs/certs/private and modify the configuration file e.g.

sudo nano /etc/davfs2/davfs2.conf

by uncommenting (removing the #) the lines trust_ca_cert and clientcert and adding the full paths to the respective certificates e.g.

trust_ca_cert         /etc/davfs2/certs/ca.cert.pem
#servercert
clientcert            /etc/davfs2/certs/private/xxx.yyy.com.p12

save the file and exit (Ctrl + O, Ctrl + x in nano) and make sure the clientcert has the correct permissions

sudo su
chmod 0600 /etc/davfs2/certs/private/xxx.yyy.com.p12
exit

Usage

To mount the filesystem run

sudo mount -t davfs -o uid=bruni,gid=users https://serveraddress /home/bruni/mountpoint

Drawbacks

The problems with this solution are:

  1. I need to enter the certificate password each time I mount the webdav share (certificate passwords are not supposed to be known to users, and they are quite long) update: This is not completely true. You can use the /etc/davfs2/secrets credential file.
  2. The website offers links in the form davs:// which do not work with the above scenario
  3. Freefilesync returns the following error when I try to synchronize with a folder mounted as above:

>

Cannot set directory lock for "/path/to/mountpoint".

Cannot write file "/path/to/mountpoint/sync.ffs_lock".

Error Code 13:Permission denied (open)

update To mitigate this, I have switched to rsync. Hence, I would prefer an answer involving instructions on how to do this using the standard Nautilus method, or some remedies to the aforementioned problems.

0

As this is a self signed certificate you will need to ensure that BOTH ends have the CA public cert installed.

This typically doesn't work in the same way for all packages as some don't make use of the central cert store.

Heres some instructions on install root CA certs in ubuntu How do I install a root certificate?

  • The Server side definitely has the CA public cert installed. On the client side I followed the instructions of the accepted answer to the link you provided, but I continue to receive the same response. This would imply that Nautilus does not use the central cert store or that I did not follow the instructions correctly (don't think that as I saw the certificate during installation). – Bruni Jun 7 '16 at 15:54
  • I have also installed these certificates with double clicking in nautilus (hoping that this installs in the cert store that nautilus itself uses) – Bruni Jun 7 '16 at 16:39
  • you might need to logout and back in again to pick up changes, shouldn't need a restart though – Amias Jun 7 '16 at 18:45
  • This does not seem to suffice, I receive the same response – Bruni Jun 8 '16 at 7:55

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.