IBM Support

IBM AIX: Import CA certificate

How To


Summary

Process to import CA certificate on AIX

Steps

Follow the steps in the order shown for importing CA certificate on AIX.

1. Download the CA certificate from a trusted source.
2. Check the directory where OpenSSL stores certificates
# openssl version -d
For AIX, it is /var/ssl/certs
3.  If the directory doesn't exist, as "root" user, create the directory
# mkdir -p /var/ssl/certs
Copy the CA certificate file and cd to the directory
# cp <CA-certificate-file> /var/ssl/certs
# cd /var/ssl/certs
4. If not already in PEM format, convert the certificate
5. Verify downloaded CA certificate fingerprint matches the CA certificate fingerprint from the trusted source
# openssl x509 -noout -fingerprint -in <CA-certificate-file name>
6.  If step #5 is successful, calculate certificate's hash value.  OpenSSL looks for certificates using their hash value
# openssl x509 -noout -hash -in <CA-certificate-file name>
7. Create a symbolic link for the hash value
# ln -s <CA-certificate-file name or any name>  <hash value from step #6>.0
or step #6 and #7 can be combined:
# ln -s <CA-certificate-file name or any name> `openssl x509 -hash -noout -in <CA-certificate-file name>`.0
8. Verify by connecting to the Web site that uses the certificate:
# openssl s_client -connect <server>:port

Additional Information

SUPPORT:

If additional assistance is required after completing all of the instructions provided in this document, please follow the step-by-step instructions below to contact IBM to open a case for software under warranty or with an active and valid support contract.  The technical support specialist assigned to your case will confirm that you have completed these steps.

a.  Document and/or take screen shots of all symptoms, errors, and/or messages that might have occurred

b.  Capture any logs or data relevant to the situation.

c.  Contact IBM to open a case:

   -For electronic support, please visit the IBM Support Community:
     https://www.ibm.com/mysupport
   -If you require telephone support, please visit the web page:
      https://www.ibm.com/planetwide/

d.  Provide a good description of your issue and reference this technote

e.  Upload all of the details and data to your case

   -You can attach files to your case in the IBM Support Community
   -Or Upload data to IBM testcase server analysis:

    http://www.ibm.com/support/docview.wss?uid=ibm10733581

f.  Click here to submit feedback for this document.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG10","label":"AIX"},"Component":"","Platform":[{"code":"PF002","label":"AIX"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]

Document Information

Modified date:
09 December 2020

UID

ibm16379044

Page Feedback