<Solved> Fritzbox certificate how to install

[O-rion]

Hello all,

I have a Fritzbox router which can generate a certificate for use on my system.
My question: how do I install that box.cer file?
My system is a Linux Mint 18.1 MATE 64bit.
I'ld like that certificate installed so when I ftp to the Frithbox via filezilla it doesn't complain about the missing certificate anymore.


Hope someone knows and can help.
O-rion

[kyphi]

Here is the URL regarding Fritzbox certificates for the 7390:

https://en.avm.de/service/fritzbox/frit ... -computer/

If you have a different model you will have to ask the manufacturer AVM or access the knowledge base at the URL above.

Addendum: The instructions to install "boxcert.cer" given in the URL above were most probably written for an older version of Firefox. To install boxcert.cer in Firefox 58.0.2 access the "Privacy & Security" setting via Edit, Preferences.

[O-rion]

Thanks for your answer.
In the article you linked it says:

Import the certificate to the computer's certificate administration. ... The manufacturer of the Linux distribution ... can provide you with information on importing certificates.

That's what I need ... only I don't know how to do that.
Firefox is not the problem. it's filezilla that complains about the missing certificate. So each time I want to ftp to or from my Fritzbox I have to click that warning away ... which is annoying.

Maybe someone here knows and can help.
Cheers O-rion

[kyphi]

Certificates are added to the system as superuser.
Move the file boxcert.cer to /usr/local/share/ca-certificates and then run sudo update-ca-certificates

Firefox has its own ca-certificates separate from the operating system.

[O-rion]

Thank you kyphi.
Seems to work for the moment.

[O-rion]

Turned out today that it didn't help :-(. Just worked for one day ( probably because filezilla has a cookie for that somewhere)
When running

Code: Select all

sudo update-ca-certificates

the output is:

Code: Select all

Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...

done.
done.

Reads to me that nothing is added.
Tried those locations as well ... still it said nothing was added.

What else could I try?

[kyphi]

You could try adding the boxcert.cer file to /etc/ssl/certs/ca-certificates.crt
Follow with sudo update-ca-certificates

[O-rion]

no luck up to now ...
So I'll probably give up on that one.

[kyphi]

The information in the following URL may explain it better:

https://superuser.com/questions/437330/ ... -to-ubuntu

There is quite a lot of information available on-line on this subject.

[O-rion]

Thanks for the link, kyphi.
I'll study that one.

[O-rion]

Finally managed to get the certificate imported.
Had to rename it to boxcert.crt.

Still Filezilla only accepts it for the day. Next day it asks again. So there must be a problem with Filezilla still. I'll investigate that further in their forum.
Thanks kyphi for your help ... and patience.

[kyphi]

Two thoughts:
1. Have you checked and adjusted the permissions of boxcert.crt - right click on the file and look in properties.
2. Have you considered using another ftp programme ? As I understand it Filezilla is not being maintained.