helpdavfs2 - Support: sr #109163, Not use additional Self-Signed CA...

 
 

sr #109163: Not use additional Self-Signed CA Certificate

Submitted by:  None
Submitted on:  Sat Oct 8 07:56:15 2016  
 
Category: NonePriority: 5 - Normal
Severity: 3 - NormalStatus: Done
Privacy: PublicAssigned to: Werner Baumann <wbaumann>
Originator Email: -unavailable-Open/Closed: Open
Operating System: GNU/Linux

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun Oct 9 07:50:58 2016, comment #2:

Hi Werner,

thank you very much. :-)

best regards,
Nick

Anonymous
Sat Oct 8 15:25:28 2016, comment #1:

If you want an option like "trust_ca_cert" to apply to one davfs2 file system but to not affect others, you have to create a mount specific section in your davfs2.conf file. (Please read "man davfs2.conf" for details.)

Example:
config file ~/.davfs2/davfs2.conf
Insert at the end of the file:
[/a/b/c]
trust_ca_cert ca-cert.pem

This has the effect.
When mounting a davfs2 file system at mountpoint /a/b/c then the server certificate will be checked against ca-cert.pem. No other davfs2 file system is affected.
You should put ca-cert.pem into ~/.davfs2/certs because you configured it in the user specific config file.

If you want your ca-cert.pem to be treated like any other CA-certificate then you must put it into the system's certificate store, probably /etc/ssl/certs. On must system you must additionally create a symbolic link to this cert. The name of the symbolic link is a hash of the subject name with ".0" appended.
You get this hash with command
openssl x509 -in /name/of/cert/file -noout -subject_hash

Example:
Add ca-cert.pem to /etc/ssl/certs
openssl x509 -in /etc/ssl/certs/ca-cert.pem -noout -subject_hash
The output ma be "0b1b94ef"
cd into /etc/ssl/certs and create a symbolic link
ln -s ca-cert.pem 0b1b94ef.0

Werner

Werner Baumann <wbaumann>
Project AdministratorIn charge of this item.
Sat Oct 8 07:56:15 2016, original submission:

Hello,

in which directory must i place my CA Certificate to use for davfs. I have putting in follow directory:
/etc/ssl/certs
/etc/davfs2/certs
~/.davfs2/certs
Davfs will no trust the connection. What must i do to trust my CA certificate ? If use option trust_ca_cert in davfs2.conf, no other CA certificate are trusted.
Best regards,
Nick

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by wbaumann (Posted a comment)
  • -unavailable- added by None (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun Oct 9 08:49:27 2016wbaumannStatusNone=>Done
      Assigned toNone=>wbaumann

    Back to the top


    Powered by Savane 3.1-cleanup1