Install Cloud Root CA on Ubuntu or Debian

book

Article ID: 171332

calendar_today

Updated On:

Products

Web Security Service - WSS

Issue/Introduction

You are using an Ubuntu/Debian machine protected by the Web Security Service (with SSL Interception enabled) and you're facing errors when browsing HTTPS websites. This article describes steps to download and install Cloud (Threatpulse) trusted root certificate authority (CA) into Ubuntu/Debian

 

- The certificate is not trusted.
- Your connection is not private.
- Untrusted issuer
- Certificate unknown

Cause

The web browser could not find and is not trusting the Cloud Root CA when you have SSL interception enabled.

Environment

  • Ubuntu/Debian (Linux)

Resolution

Download the Cloud Root CA from your portal and follow these steps:

  1. Create a directory for extra CA certificates in /usr/share/ca-certificates:

    sudo mkdir /usr/share/ca-certificates/extra
    
  2. Copy the CertEmulationCA.crt file to this directory:

    sudo cp CertEmulationCA.crt /usr/share/ca-certificates/extra/CertEmulationCA.crt
    
  3. Update ca-certificates configuration to include the recently imported certificate.

    sudo dpkg-reconfigure ca-certificates