Install Intermediate SSL Certificate

From Bitbull Wiki
Jump to navigation Jump to search

Install Intermediate SSL Certificate

1 Ubuntu 16.04(Debian8)

  • Open root terminal and copy the certificate into /usr/local/share/ca-certificates/*.crt.
  • Run sudo update-ca-certificates command to rebuild the system certificate store.
  • Restart your internal application eg nginx/squid/apache

2 CentOS 7

  • Ensure intermediate certificate ends with .pem (this is required for CentOS 7).
  • Open root terminal and copy the certificate into /etc/pki/ca-trust/source/anchors/ folder.
  • Run update-ca-trust command to rebuild the system certificate bundle. It should finish without any output.
  • Restart your internal application eg nginx/squid/apache

3 Notes

  • Messages to this issue:
SQUID MSG: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY
cURL error 60: Peer's certificate has an invalid signature.