Skip to Content [alt-c]
In reply to Comment by Reader Christian Heimes
Hi Cristian,
Thanks for sharing the addtrust-external-root.p11-kit file. I was unable to use it directly on CentOS 6 and 7 machines; both get this error when running sudo update-ca-trust extract:
sudo update-ca-trust extract
p11-kit: addtrust-external-root.p11-kit: nss-server-distrust-after: invalid or unsupported attribute p11-kit: addtrust-external-root.p11-kit: nss-server-distrust-after: invalid or unsupported attribute p11-kit: addtrust-external-root.p11-kit: nss-server-distrust-after: invalid or unsupported attribute …
After commenting-out the lines starting with nss-* I was able to run sudo update-ca-trust extract successfully, and I'm able to connect to the test site.
nss-*
I'm testing this issue with this command:
php -r 'echo file_get_contents("https://addtrust-chain.demo.sslmate.com/");'
Thanks again. :)
Reply
Your comment will be public. If you would like to contact me privately, please email me. Please keep your comment on-topic, polite, and comprehensible.
Your Name: (Optional; will be published)
Your Email Address: (Optional; will not be published)
Your Website: (Optional; will be published)
monospaced
Post a Reply
Your comment will be public. If you would like to contact me privately, please email me. Please keep your comment on-topic, polite, and comprehensible.