Coming to folder with certificates and convert to PEM:
$ cd /some/path
$ for f in *.cer; do openssl x509 -in "$f" -inform DER -out "$f.pem" -outform PEM; done;
Now as root, move PEM files and generate symlink hashes:
# cd /var/lib/ca-certificates/openssl
# cp /some/path/*.pem .
# for file in *.pem; do ln -s "$file" "$(openssl x509 -hash -noout -in "$file").0"; done
Logout as root and verify:
$ openssl verify -crl_check_all *.pem
$ cd /some/path
$ for f in *.cer; do openssl x509 -in "$f" -inform DER -out "$f.pem" -outform PEM; done;
Now as root, move PEM files and generate symlink hashes:
# cd /var/lib/ca-certificates/openssl
# cp /some/path/*.pem .
# for file in *.pem; do ln -s "$file" "$(openssl x509 -hash -noout -in "$file").0"; done
Logout as root and verify:
$ openssl verify -crl_check_all *.pem
Комментариев нет:
Отправить комментарий