Differences

This shows you the differences between two versions of the page.

--- tools:certificates [2024/11/01 10:10] – [Python] certifi will
+++ tools:certificates [2025/04/25 16:42] (current) – [Terminal] will
@@ Line 21: / Line 21: @@
 To allow UPMC's cert in the SSL chain on debian, run:
 <code>
-  # as root
+# as root
-  cd /usr/local/share/ca-certificates/
+[ $(id -u) -ne 0 ] && echo "with sudo" && exit 1
-  cert_loc=http://upmccrl.upmc.com/CDP/
-  for crt in UPMC-CA23 UPMC-CA20 UPMC-ROOT-CA; do
+cd /usr/local/share/ca-certificates/
-     wget "$cert_loc/$crt.crt" -O "$crt.crt-der"
+cert_loc=https://upmccrl.upmc.com/cdp
-     # added 20230707
+# 20250313 - added "UPMC ROOT CA 2023" via Nathan Safran
-     openssl x509 -in $crt.crt-der -out $crt.crt -outform PEM
+for crt in UPMC-CA23 UPMC-CA20 UPMC-ROOT-CA "UPMC ROOT CA 2023"; do
-  done
+   ! wget "$cert_loc/$crt.crt" -O "$crt.crt-der" && echo "ERROR: cannot get '$crt'" && continue
-  update-ca-certificates
+   # added 20230707
+   openssl x509 -in "$crt.crt-der" -out "$crt.crt" -outform PEM
+done
+update-ca-certificates
 </code>