View Single Post
Posts: 4 | Thanked: 1 time | Joined on Dec 2010
#1
Hi,

I am having a hard time fiddling around with certificates on the N9:

I am trying to import my own created CA so that I do not get the certificate errors when surfing on my own sites using https.
The certificate seems to install fine using GUI, before I hit "install" all the four toggle switches for Websites, Wi-Fi, Mail users and Software makers are activated.

For some reason the Websites switch is set to off when I check after the certificate has been installed. I can activate it but it will be deactivated again (magically) when I reenter the menu.

acmcli shows what would be expected:
acmcli -t ssl-ca -L
(nothing listed)

it is not listed in common-ca either. It is listed in codesign-ca, smime-ca and wifi-ca though.

Toggeling the switch will write this to /var/log/syslog:
Sep 10 17:53:50 (2012) certificate_install: aegis_storage.cpp(1436): ERROR add_file: access denied
Sep 10 17:53:50 (2012) certificate_install: aegis_storage.cpp(1641): ERROR add_link: access denied
Sep 10 17:53:50 (2012) certificate_install: aegis_storage.cpp(1935): ERROR commit: access denied, cannot commit '/var/lib/aegis/ps/Ss/certman.ssl-ca'
Sep 10 17:53:50 (2012) certificate_install: dbusservice.cpp(552): ERROR _installCertToDomains: failed adding certificate to 'ssl-ca' (13)
Sep 10 17:53:50 (2012) dcp-appletloader[13415]: certificatesapplet.cpp(486): ERROR settingsChanged: insert failed


When I try to add the certificate to the ssl-ca domain I get this error:

acmcli -p ssl-ca -a /home/user/MyDocs/ca.crt
ERROR: cannot add certificates (Permission denied)


This seems to happen with every change that I am trying perform using acmcli:

acmcli -p wifi-ca -r 54c06f[...] -f
ERROR: cannot remove certificate (Permission denied)

The "verbose" switch -d / -dd does not seem to work either.

Is there some kind of a trick to invoke acmcli with some kind of a wrapper? So that the permission denied error does not occur?

Regards
finnjet