maindavfs2 - Support: sr #109163, Not use additional Self-Signed CA...

 
 

sr #109163: Not use additional Self-Signed CA Certificate

Submitter:  None
Submitted:  Sat 08 Oct 2016 07:56:15 AM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  _71007
Originator Email:  -email is unavailable- Open/Closed:  Closed
Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Sun 09 Oct 2016 07:50:58 AM UTC, comment #2: 

Hi Werner,

thank you very much. :-)

best regards,
Nick

Anonymous
Sat 08 Oct 2016 03:25:28 PM UTC, comment #1: 

If you want an option like "trust_ca_cert" to apply to one davfs2 file system but to not affect others, you have to create a mount specific section in your davfs2.conf file. (Please read "man davfs2.conf" for details.)

Example:
config file ~/.davfs2/davfs2.conf
Insert at the end of the file:
  [/a/b/c]
  trust_ca_cert  ca-cert.pem

This has the effect.
When mounting a davfs2 file system at mountpoint /a/b/c then the server certificate will be checked against ca-cert.pem. No other davfs2 file system is affected.
You should put ca-cert.pem into ~/.davfs2/certs because you configured it in the user specific config file.

If you want your ca-cert.pem to be treated like any other CA-certificate then you must put it into the system's certificate store, probably /etc/ssl/certs. On must system you must additionally create a symbolic link to this cert. The name of the symbolic link is a hash of the subject name with ".0" appended.
You get this hash with command
  openssl x509 -in /name/of/cert/file -noout -subject_hash

Example:
Add ca-cert.pem to /etc/ssl/certs
  openssl x509 -in /etc/ssl/certs/ca-cert.pem -noout -subject_hash
The output ma be "0b1b94ef"
cd into /etc/ssl/certs and create a symbolic link
  ln -s ca-cert.pem 0b1b94ef.0

Werner

- <_71007>
Sat 08 Oct 2016 07:56:15 AM UTC, original submission:  

Hello,

in which directory must i place my CA Certificate to use for davfs. I have putting in follow directory:
/etc/ssl/certs
/etc/davfs2/certs
~/.davfs2/certs
Davfs will no trust the connection. What must i do to trust my CA certificate ? If use option trust_ca_cert in davfs2.conf, no other CA certificate are trusted.
Best regards,
Nick

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by _71007 (Posted a comment)
  • -email is unavailable- added by None (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-12-26 _71007 Open/ClosedOpen Closed
    2016-10-09 _71007 StatusNone Done
        Assigned toNone _71007

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code