Skip to Content [alt-c]

Blog

Comment

In reply to Comment by Reader Christian Heimes

Reader Quinn on 2020-05-31 at 23:56:

Hi Cristian,

Thanks for sharing the addtrust-external-root.p11-kit file. I was unable to use it directly on CentOS 6 and 7 machines; both get this error when running sudo update-ca-trust extract:

p11-kit: addtrust-external-root.p11-kit: nss-server-distrust-after: invalid or unsupported attribute p11-kit: addtrust-external-root.p11-kit: nss-server-distrust-after: invalid or unsupported attribute p11-kit: addtrust-external-root.p11-kit: nss-server-distrust-after: invalid or unsupported attribute …

After commenting-out the lines starting with nss-* I was able to run sudo update-ca-trust extract successfully, and I'm able to connect to the test site.

I'm testing this issue with this command:

php -r 'echo file_get_contents("https://addtrust-chain.demo.sslmate.com/");'

Thanks again. :)

Reply

Post a Reply

Your comment will be public. To contact me privately, email me. Please keep your comment polite, on-topic, and comprehensible. Your comment may be held for moderation before being published.

(Optional; will be published)

(Optional; will not be published)

(Optional; will be published)

  • Blank lines separate paragraphs.
  • Lines starting with > are indented as block quotes.
  • Lines starting with two spaces are reproduced verbatim (good for code).
  • Text surrounded by *asterisks* is italicized.
  • Text surrounded by `back ticks` is monospaced.
  • URLs are turned into links.
  • Use the Preview button to check your formatting.