Installing Custom CA Certificates on Ubuntu 22.04

Thu, 12 Oct 2023 23:18:00 -0500

Installing Custom CA Certificates on Ubuntu 22.04

If you are dealing with a server that uses self-signed SSL certificates, you may encounter issues with client utilities like curl, which may refuse to work without using the -k or --insecure option. Here’s a step-by-step guide on how to install custom CA certificates on an Ubuntu 22.04 system (similar steps apply to Ubuntu 20.04 and 18.04):

Combine SSL Certificates: Start by combining the SSL certificate chain and the SSL certificate into a single file. You can download both certificates from your server by accessing https://your-server-name. Ensure that the file extension for this combined certificate file is .crt.
Copy to CA Certificates Directory: Copy the .crt file you created in the previous step to the /usr/local/share/ca-certificates/ directory.
Update CA Certificates: Run the following command to update the CA certificates on your system:

How to become a local CA, and sign your own SSL certificates

Tue, 19 Nov 2019 20:17:00 +0000

Sometimes when you experiment with some apps and VMs (like hosting gitlab on a local server or running a Rancher lab cluster) you might want to setup SSL for the app to work, to mimic the live setup and to make the browser happy. In order to do that, you need a SSL certificate.

You can buy one for your domain from a trusted CA, but if you’re working on a local network, that might not be possible. The other solution is… becoming CA yourself and issuing and signing the certificate yourself!

It’s pretty easy, you need a linux box with openssl installed, then follow these instructions:

Certificates on Support Tools

Installing Custom CA Certificates on Ubuntu 22.04

Installing Custom CA Certificates on Ubuntu 22.04

How to become a local CA, and sign your own SSL certificates