Don’t get me started about Certificate support on Mac OS\/X<\/b>
It is 3AM and I just killed myself trying to figure out where to get various browsers\/JVM’s to trust a simple certificate. Here are some notes.
\nMac OS\/X does JVM 1.4 but has 1.3 installed as well. There are three places that you need to get certs trusted:
\n\/System\/Library\/Keychains\/X509Anchors is where much of the mainstream tools look for certs – there is a tool called certtool – just Google X590Anchors to see how to do it. Follow the einstructions exactly – the X509Anchors file must be in ~\/Library\/Keychains\/X509Anchors or the certtool won’t work.
\nThe JVMs have their own little places to trust certificates:
\n\/System\/Library\/Frameworks\/JavaVM.framework\/Versions\/1.3.1\/Home\/lib\/security\/cacerts
\n\/System\/Library\/Frameworks\/JavaVM.framework\/Versions\/1.4.1\/Home\/lib\/security\/cacerts
\nHere are some commands that I found useful:
\nkeytool -import -trustcacerts -alias NCSA -file \/tmp\/4a6cd8b1.0 -keystore cacerts
\nkeytool -import -trustcacerts -alias cee-nees -file \/tmp\/hostcert.der -keystore cacerts
\nThe password is changeit
\nHere is a useful command (with variants)
\nopenssl x509 -in histcert.pem -inform pem -out hostcert.der -outform der
\nThis allows you to convert certs.<\/p>\n","protected":false},"excerpt":{"rendered":"
Don’t get me started about Certificate support on Mac OS\/XIt is 3AM and I just killed myself trying to figure out where to get various browsers\/JVM’s to trust a simple certificate. Here are some notes. Mac OS\/X does JVM 1.4 but has 1.3 installed as well. There are three places that you need to get […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-20","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/posts\/20","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/comments?post=20"}],"version-history":[{"count":2,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/posts\/20\/revisions"}],"predecessor-version":[{"id":2116,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/posts\/20\/revisions\/2116"}],"wp:attachment":[{"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/media?parent=20"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/categories?post=20"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/tags?post=20"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}