Auto-certificate and Chrome

[qinohe]

Sorry, but I only created a self-certificate.

Why on earth you want to do that, what are you trying to accomplish?
If you go down that rabbit hole, be my guest, but I can't help you doing that  ;)

Greetings, mark

[balubeto]

Sorry, but I only created a self-certificate.

Why on earth you want to do that, what are you trying to accomplish?
If you go down that rabbit hole, be my guest, but I can't help you doing that  ;)

Greetings, mark

I'm simply trying to export a self-certificate so that I can import it in Chrome to access the firewall using the https protocol.

Since you now have the images of my firewall in English, can you tell me how to proceed?

Thanks

Bye

[fabian]

click the download button "export CA cert" and import it into your trust store (this is specific for your OS)

[balubeto]

click the download button "export CA cert" and import it into your trust store (this is specific for your OS)

This button is located in the "System: Trust: Authorities" panel. Right?

Thanks

Bye

[fabian]

yes

[qinohe]

I'm sorry that I misunderstood you, I thought you were doing the whole thing without a CA, CRT only, I guess that's clear now.

Greetings, mark

[balubeto]

When I create a certificate in the "System: Trust: Certificates"  tab, can I put the full name (xxxxx.yyyyyy) of the firewall and its URI (https://xxxxx.yyyyyy) respectively in the "Common Name" and "Type URI" fields?

Thanks

Bye

[qinohe]

Yes, though, it only accepts the full URL, like: https://my.domain

[balubeto]

Using Chrome for Windows 7 SP1, in which type of certificates archive should I insert my intermediate certificate exported from OPNsense?

Thanks

Bye

[qinohe]

See post #4 of this thread.

Greetings, mark

[balubeto]

After importing my self-certification in chrome and enabling the HTTPS protocol to access the firewall webGUI, every time I access this via web, Chrome displays the " Privacy error" page before accessing the Login page (see attachments).


In addition, I noticed that, in the address bar, the words "Not secure" and "https" are displayed. How come?


How should I resolve these annoyances?


Thanks


Bye

[fabian]

Since your screenshot looks like Windows 7 - here is some official documentation:
https://docs.microsoft.com/en-us/skype-sdk/sdn/articles/installing-the-trusted-root-certificate

[balubeto]

Since your screenshot looks like Windows 7 - here is some official documentation:
https://docs.microsoft.com/en-us/skype-sdk/sdn/articles/installing-the-trusted-root-certificate

I have Windows 7 SP1 64bit.

From OPNsense, should I export the root or intermediate certificate?

Should the steps indicated in your document be done for each account or only by the administrator?

Thanks

Bye

[balubeto]

I am awaiting your reply.

Thanks

Bye

[fabian]

I am an Arch Linux user. It it different here.
In my case it would be:
Store in /etc/ca-certificates/trust-source/anchors and call trust extract-compat.