Das Einfügen von Zertifikaten in / usr / local / share / ca-certificate und das Ausführen des Skripts funktionierten für mich beim Debian-Testen von x64 nicht ...
Ich brauchte nur https://www.thawte.com/roots/thawte_Premium_Server_CA.pem
Laden Sie es herunter und kopiert / umbenannt als /usr/share/ca-certificates/mozilla/thawte_Premium_Server_CA.crt (muss .crt sein, um erkannt zu werden). Danach habe ich "sudo dpkg-reconfigure ca-certificate" gefragt, als ich gefragt wurde, ob ich neuen Zertifikaten vertraue. Ich sagte ja und aktiviert dann ausdrücklich thawte-Premium_Server_CA, was zu folgendem Ergebnis führte:
root@hvulin:/etc# dpkg-reconfigure ca-certificates Processing triggers for ca-certificates (20160104) ... Updating certificates in /etc/ssl/certs... WARNING: Skipping duplicate certificate thawte_Primary_Root_CA.pem WARNING: Skipping duplicate certificate thawte_Primary_Root_CA.pem 1 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... Adding debian:thawte_Premium_Server_CA.pem done. Updating Mono key store Linux Cert Store Sync - version 4.2.1.0 Synchronize local certs with certs from local Linux trust store. Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed. I already trust 175, your new list has 178 Certificate added: C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority Certificate added: C=ZA, S=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, E=premium-server@thawte.com Certificate added: O=CAcert Inc., OU=http://www.CAcert.org, CN=CAcert Class 3 Root Certificate added: O=Root CA, OU=http://www.cacert.org, CN=CA Cert Signing Authority, E=support@cacert.org Certificate added: C=ZA, S=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, E=premium-server@thawte.com Certificate added: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2006 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA 6 new root certificates were added to your trust store. Import process completed. Done done.