LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-29-2010, 01:46 PM   #1
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Rep: Reputation: 60
PKI certificates and Web Browsers


We have a web server running apache and a custom web app that we log into from a web browser and it ask you to except the certificate and all is well. I now have an user who is using a window server 2008 and he wants to manually import the *.cer file into his browser to be able to login. My question are:

1 - What is the file that is being imported into the browser? *.pem *.crt

2 - I see on our server that we have our certs I believe located in the /etc/pki/tls/certs. The openRADIUS servers that I have created, this is the directory to where it is stored.Is this the typical placement for certs.

3 -If the files is a .cert or *.pem than could I use openssl to convert them to the appropiate *.cer file for IE7

Last edited by metallica1973; 12-29-2010 at 02:05 PM.
 
Old 12-29-2010, 03:22 PM   #2
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
Ok so in response to my own question, I came up with my own answer, sometimes that happens on occassion:

1 - The file that is being imported into browsers are *.crt files located using apache in /etc/httpd/conf/vhosts.d/01_default_ssl_vhost.conf

PHP Code:
SSLCertificateFile /etc/pki/tls/certs/localhost.crt 
2 - Though you can save your certs in any folder with the appropriate permissions most using openssl are saved under:

PHP Code:
/etc/pki/tls/certs
3 - You can use openssl and others to convert files from *.crt to *.cer certificates:

PHP Code:
http://www.bogpeople.com/networking/openssl.shtml 
 
1 members found this post helpful.
Old 01-04-2011, 06:52 AM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Thanks for posting your solution!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Web client authentication through PKI and CACs. CoderMan Linux - Security 1 07-13-2010 12:41 PM
Certificates creation errors during Apache web server installation... mphooo Linux - Newbie 1 09-18-2009 06:50 AM
LXer: Comparison Between Linux Web Browsers - Review of 5 Linux Browsers LXer Syndicated Linux News 0 05-17-2008 01:21 PM
browsers certificates and "secure" browsing tcaptain Linux - Software 0 07-16-2003 10:25 AM
Jerky mouse when web browsers download web page stodge Linux - Software 1 07-08-2003 10:29 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:24 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration