KB 2762: HOW TO ADD AN AUTHORITY CERTIFICATE TO THE SYSTEM STORE USED BY THE OLFEO V6.2 SOLUTION
Remove the browser notification telling you that the web certificate issuer is not trusted and that it is not possible to continue the connection.
SYMPTOMS
When you enable SSL decryption on your web security gateway, you transfer SSL protocol security to the client, which becomes the gateway. In other words, your certificate stores and SSL configurations will no longer be directly involved in handshakes with websites.
The Olfeo solution currently relies on the Debian system repository. Occasionally, if the system repository does not have a certificate in a chain, you will see a browser notification stating that the web certificate issuer is not trusted and that we cannot continue the connection.
Example: Connecting via Firefox and Olfeo to a site that presents us with a server certificate issued by an authority we do not recognize.
STEPS
To address this issue, here are the steps to follow:
- Retrieve and analyze missing certificates on the Internet.
- Submit the missing certificate(s) to the Olfeo system. (Please note that the format must be .crt.)
- Import the Olfeo certificate into the system store. Deposit the document in scp (via PuTTY from a Windows workstation) on Olfeo Copy the certificate deposited in the directory:
/certs/: cp file.crt /etc/ssl/certs/
- Import the Olfeo certificate into the system store. Invoke the command:
update-ca-certificates
- The result should be as follows:Updating certificates in /etc/ssl/certs... 1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Then, all you have to do is try logging in to the site again.
