Dyskusja Importing trusted root certificates.... I think!

nasuserplus · 23 Luty 2015

Hi,

Firstly, sorry for the English here, I don't know Polish.

I have a problem that I think is related to the lack of trusted root certificates on my QNAP.

I have been looking at the QNAP forums for some time and found several references to https and problems with root certificates, but can't get this to work!

I am wanting to connect to a torrent tracker with an https:// url. (rtorrent won't connect, it just says "Error".)

I think I have narrowed this down to this:

Kod:

# wget https://trackerurl.biz
--2015-02-23 12:45:03--  https://trackerurl.biz/
Resolving trackerurl.biz... 87.98.216.81
Connecting to trackerurl.biz|87.98.216.81|:443... connected.
ERROR: cannot verify trackerurl.biz's certificate, issued by `/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2':
  Self-signed certificate encountered.
To connect to trackerurl.biz insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.

I have put the trusted root certs in /opt/share/openssl/certs, and converted to hashes, and this works:

Kod:

# wget --ca-directory=/opt/share/openssl/certs https://trackerurl.biz
--2015-02-23 12:46:14--  https://trackerurl.biz/
Resolving trackerurl.biz... 87.98.216.81
Connecting to trackerurl.biz|87.98.216.81|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `index.html'

    [ <=>                                                                 ] 9,038       --.-K/s   in 0.004s

2015-02-23 12:46:15 (2.00 MB/s) - `index.html' saved [9038]

Where should I put the certs to have them picked up automatically system-wide without having to specify a directory explicitly?

Thanks for any help you can give me.

SiewcaRyżu · 23 Luty 2015