OLD | NEW |
1 # Linux Cert Management | 1 # Linux Cert Management |
2 | 2 |
| 3 *** note |
3 **NOTE:** SSL client authentication with personal certificates does not work | 4 **NOTE:** SSL client authentication with personal certificates does not work |
4 completely in Linux, see [issue 16830](https://crbug.com/16830) and | 5 completely in Linux, see [issue 16830](https://crbug.com/16830) and |
5 [issue 25241](https://crbug.com/25241). | 6 [issue 25241](https://crbug.com/25241). |
| 7 *** |
6 | 8 |
7 The easy way to manage certificates is navigate to chrome://settings/search#ssl. | 9 The easy way to manage certificates is navigate to chrome://settings/search#ssl. |
8 Then click on the "Manage Certificates" button. This will load a built-in | 10 Then click on the "Manage Certificates" button. This will load a built-in |
9 interface for managing certificates. | 11 interface for managing certificates. |
10 | 12 |
11 On Linux, Chromium uses the | 13 On Linux, Chromium uses the |
12 [NSS Shared DB](https://wiki.mozilla.org/NSS_Shared_DB_And_LINUX). If the | 14 [NSS Shared DB](https://wiki.mozilla.org/NSS_Shared_DB_And_LINUX). If the |
13 built-in manager does not work for you then you can configure certificates with | 15 built-in manager does not work for you then you can configure certificates with |
14 the | 16 the |
15 [NSS command line tools](http://www.mozilla.org/projects/security/pki/nss/tools/
). | 17 [NSS command line tools](http://www.mozilla.org/projects/security/pki/nss/tools/
). |
(...skipping 71 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
87 Use the command: | 89 Use the command: |
88 | 90 |
89 pk12util -d sql:$HOME/.pki/nssdb -i PKCS12_file.p12 | 91 pk12util -d sql:$HOME/.pki/nssdb -i PKCS12_file.p12 |
90 | 92 |
91 to import a personal certificate and private key stored in a PKCS #12 file. The | 93 to import a personal certificate and private key stored in a PKCS #12 file. The |
92 TRUSTARGS of the personal certificate will be set to "u,u,u". | 94 TRUSTARGS of the personal certificate will be set to "u,u,u". |
93 | 95 |
94 ### Delete a certificate | 96 ### Delete a certificate |
95 | 97 |
96 certutil -d sql:$HOME/.pki/nssdb -D -n <certificate nickname> | 98 certutil -d sql:$HOME/.pki/nssdb -D -n <certificate nickname> |
OLD | NEW |