helpdavfs2 - Support: sr #109163, Not use additional Self-Signed CA...


sr #109163: Not use additional Self-Signed CA Certificate

Submitted by:  None
Submitted on:  Sat 08 Oct 2016 07:56:15 AM UTC  
Category: NonePriority: 5 - Normal
Severity: 3 - NormalStatus: Done
Privacy: PublicAssigned to: Werner Baumann <wbaumann>
Originator Email: -unavailable-Open/Closed: Open
Operating System: GNU/Linux

Add a New Comment(Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Sun 09 Oct 2016 07:50:58 AM UTC, comment #2:

Hi Werner,

thank you very much. :-)

best regards,

Sat 08 Oct 2016 03:25:28 PM UTC, comment #1:

If you want an option like "trust_ca_cert" to apply to one davfs2 file system but to not affect others, you have to create a mount specific section in your davfs2.conf file. (Please read "man davfs2.conf" for details.)

config file ~/.davfs2/davfs2.conf
Insert at the end of the file:
trust_ca_cert ca-cert.pem

This has the effect.
When mounting a davfs2 file system at mountpoint /a/b/c then the server certificate will be checked against ca-cert.pem. No other davfs2 file system is affected.
You should put ca-cert.pem into ~/.davfs2/certs because you configured it in the user specific config file.

If you want your ca-cert.pem to be treated like any other CA-certificate then you must put it into the system's certificate store, probably /etc/ssl/certs. On must system you must additionally create a symbolic link to this cert. The name of the symbolic link is a hash of the subject name with ".0" appended.
You get this hash with command
openssl x509 -in /name/of/cert/file -noout -subject_hash

Add ca-cert.pem to /etc/ssl/certs
openssl x509 -in /etc/ssl/certs/ca-cert.pem -noout -subject_hash
The output ma be "0b1b94ef"
cd into /etc/ssl/certs and create a symbolic link
ln -s ca-cert.pem 0b1b94ef.0


Werner Baumann <wbaumann>
Project AdministratorIn charge of this item.
Sat 08 Oct 2016 07:56:15 AM UTC, original submission:


in which directory must i place my CA Certificate to use for davfs. I have putting in follow directory:
Davfs will no trust the connection. What must i do to trust my CA certificate ? If use option trust_ca_cert in davfs2.conf, no other CA certificate are trusted.
Best regards,



(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by wbaumann (Posted a comment)
  • -unavailable- added by None (Submitted the item)

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.


    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 09 Oct 2016 08:49:27 AM UTCwbaumannStatusNone=>Done
      Assigned toNone=>wbaumann

    Back to the top

    Powered by Savane 3.1-cleanup1