[CentOS] NetworkManger wireless issues - "Failed to load root certificates"/"unable to get local issuer certificate"

Wed Sep 7 14:17:08 UTC 2016
Toralf Lund <toralf.lund at pgs.com>

On 06/09/16 09:06, Toralf Lund wrote:
> On 05/09/16 11:08, John Hodrien wrote:
>> On Fri, 2 Sep 2016, Toralf Lund wrote:
>>
>>> Hi,
>>>
>>> I'm trying to connect my CentOS 6.8 laptop to the wireless net at
>>> work, which is secured with WPA2 and AES. I've done this successfully
>>> in the past using NetworkManager, but a new safety feature was
>>> recently introduced: A CA certificate is required. After this, I've
>>> not been able to connect. I have a DER format file, whose path I've
>>> entered in
>>
>> You've definitely provided the correct CA certificate, and not
>> accidentally
>> provided the certificate itself?
> I think you're on to something, there. I actually used data exported 
> from Windows, and I guess I ended up with (as you suggest) the "normal"
> certificate. Now I've switched to a "CA Root" .pem file for the 
> authority, and the "Failed to load root certificates" message has gone 
> away. But, I still get 'unable to get local issuer certificate'.
I now realise that the same root certificate is included in 
/etc/pki/tls/certs/ca-bundle.crt, so maybe I shouldn't need to specify 
it? Perhaps what I want is an "intermediate certificate"? Would that be 
the same thing as a "local issuer certificate"?

Also, I no longer able to reproduce the case where I got "Failed to load 
root certificates".

Let's say I'm officially confused...

- T


>
> Don't I need to provide the certificate itself, too? Where do I put it?
>
> - Toralf
>
>
>>
>> jh
>> _______________________________________________
>> CentOS mailing list
>> CentOS at centos.org
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.centos.org_mailman_listinfo_centos&d=CwICAg&c=KV_I7O14pmwRcmAVyJ1eg4Jwb8Y2JAxuL5YgMGHpjcQ&r=Q0oqxzgUp3xCCIiJDwS-RbNDndQ-KZDhj8wwveNoqU4&m=hDFAl_9PwzTrtJ4iK0Gl_fCsQjTIRPf9m3FS8SChP98&s=tNwTx4wHYKAXLwXOqOp7QWRJM1KEoQuOdt37B97jACE&e= 
>>
>
>
>