31.3.25 X.509 Authentication Lists the Entire List of Certificates Imported to the Browser

To restrict the list to only certain certificates, use the following procedure:

  1. Go to etc/opt/novell/apache2/conf/cacerts/custom and copy the required CA certificates manually to this folder using the following command:

    cp <ca files in pem format> .

    This command copies the CA certificates to the current folder.

  2. Create a hash of the pem file using the following command:

    openssl x509 -noout -hash -in <cafile.pem>

  3. Create a soft link in the same directory using the following command:

    ln -s <cafile.pem> <hash value of the file>.0

    For example, ls -l should display the following:

    /etc/opt/novell/apache2/conf/cacerts/custom # ls -ltotal 8lrwxrwxrwx 1 root root 22 2013-10-16 03:35 78038f2c.0 ->NAM-RP-Certificate.pem-rw-r--r-- 1 root root 5375 2013-10-16 03:31 NAM-RP-Certificate.pem

  4. Restart Apache using the following command:

    /etc/init.d/novell-apache2 restart