SSL certificate not working on MAC & UBUNTU OSThis article describes the steps to import self-signed certificate created on SRX in Chrome web-browser on Ubuntu OS.
Refer creation of self-signed-certificate on SRX.
For importing this certificate in Chrome web-browser on Ubuntu OS, follow the steps below:
Step1: Export the certificate from the SRX device in .pem format and the key-pair
root@SRX# run request security pki local-certificate export certificate-id SRXasCA filename /var/tmp/SRXasCA.pem
certificate exported successfully
root@SRX# run request security pki key-pair export certificate-id SRXasCA filename /var/tmp/SRXasCA.key type pem passphrase Juniper@12345
key-pair exported successfully
root@SRX# run file list /var/tmp/ | match SRX
SRXasCA.key
SRXasCA.pem
Step2: Move these files to the Ubuntu machine (you can use SCP or other similar methods)
labroot@Ubuntu20:~$ ls | grep SRX
Chrome browser on the Ubuntu OS needs a .crt file, therefore make a copy of the certificate in .crt format
labroot@Ubuntu20:~$sudo cp SRXasCA.pem SRXasCA.crt
Now, you should see the below files:
SRXasCA.crt
Step3: Move the key-pair to the /etc/ssl/private/ directory on the Ubuntu machine.
labroot@Ubuntu20:~$ sudo cp SRXasCA.key /etc/ssl/private/
Step4: Import the .crt certificate on the Chrome browser
Navigate to Settings > Certificates > Manage certificates > Authorities >Import
Select “Trust this certificate for identifying websites”, then click “OK”
Now, the certificate is successfully imported.