helpdavfs2 - Support: sr #109163, Not use additional Self-Signed CA...


sr #109163: Not use additional Self-Signed CA Certificate

Submitted by:  None
Submitted on:  Sat 08 Oct 2016 07:56:15 AM UTC  
Category:  None Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  Werner Baumann <wbaumann>
Originator Email:  -email is unavailable- Open/Closed:  Closed
Operating System:  GNU/Linux

Add a New Comment (Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Sun 09 Oct 2016 07:50:58 AM UTC, comment #2: 

Hi Werner,

thank you very much. :-)

best regards,

Sat 08 Oct 2016 03:25:28 PM UTC, comment #1: 

If you want an option like "trust_ca_cert" to apply to one davfs2 file system but to not affect others, you have to create a mount specific section in your davfs2.conf file. (Please read "man davfs2.conf" for details.)

config file ~/.davfs2/davfs2.conf
Insert at the end of the file:
  trust_ca_cert  ca-cert.pem

This has the effect.
When mounting a davfs2 file system at mountpoint /a/b/c then the server certificate will be checked against ca-cert.pem. No other davfs2 file system is affected.
You should put ca-cert.pem into ~/.davfs2/certs because you configured it in the user specific config file.

If you want your ca-cert.pem to be treated like any other CA-certificate then you must put it into the system's certificate store, probably /etc/ssl/certs. On must system you must additionally create a symbolic link to this cert. The name of the symbolic link is a hash of the subject name with ".0" appended.
You get this hash with command
  openssl x509 -in /name/of/cert/file -noout -subject_hash

Add ca-cert.pem to /etc/ssl/certs
  openssl x509 -in /etc/ssl/certs/ca-cert.pem -noout -subject_hash
The output ma be "0b1b94ef"
cd into /etc/ssl/certs and create a symbolic link
  ln -s ca-cert.pem 0b1b94ef.0


Werner Baumann <wbaumann>
Project AdministratorIn charge of this item.
Sat 08 Oct 2016 07:56:15 AM UTC, original submission:  


in which directory must i place my CA Certificate to use for davfs. I have putting in follow directory:
Davfs will no trust the connection. What must i do to trust my CA certificate ? If use option trust_ca_cert in davfs2.conf, no other CA certificate are trusted.
Best regards,



(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by wbaumann (Posted a comment)
  • -email is unavailable- added by None (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-12-26 wbaumann Open/ClosedOpen => Closed
    2016-10-09 wbaumann StatusNone => Done
        Assigned toNone => wbaumann

    Back to the top

    Powered by Savane 3.5