When your Java app or system tools start throwing SSL errors because they don’t recognise your company’s internal CA, this is the fix. The pem to crt conversion step catches people out — most systems want .crt format even if the content is PEM-encoded.
- Make directory for extra certs
1
| $ sudo mkdir /usr/share/ca-certificates/extra
|
- Incase of pem file convert it to cer
1
| $ openssl x509 -in root.pem -inform PEM -out root.crt
|
- copy your cert to the extra directory
1
| $ sudo cp root.crt /usr/share/ca-certificates/extra/root.crt
|
1
2
3
4
5
| $ sudo dpkg-reconfigure ca-certificates
$ # or for non-interactive
$ sudo update-ca-certificates
|