Entrust - Revision history

Leo: Sectigo signing certificate info

2025-07-02T16:25:23Z

Sectigo signing certificate info

← Older revision		Revision as of 16:25, 2 July 2025
Line 1:		Line 1:
	Entrust is a certificate authority.		Entrust is a certificate authority.

			== Sectigo ==
			Google stopped trusting Entrust signed certificates since around June 2024. Entrust has since started signing their certificates through Sectigo. The certificate chain for a EV certificate now looks like this:

			USERTrust RSA Certification Authority

			* [https://paste.steamr.com/view/raw/97e71c82 Sectigo Public Server Authentication Root R46]
			** [https://paste.steamr.com/view/raw/8a4028f7 Entrust EV TLS Issuing RSA CA 2]

			Like Entrust's crap certs, you'll have to install the Sectigo and Entrust intermediate certs to make most things work. For some reason, I don't see the intermediate certs listed on their website, so the links above go to a copy on my pastebin.

	== Troubleshooting ==		== Troubleshooting ==

Leo at 21:49, 1 August 2024

2024-08-01T21:49:58Z

← Older revision		Revision as of 21:49, 1 August 2024
Line 29:		Line 29:
	\| lang = terminal		\| lang = terminal
	}}On Debian:{{Highlight		}}On Debian:{{Highlight
	\| code = # mkdir -p /usr/share/ca-certificates~~/local~~		\| code = # mkdir -p /usr/local/share/ca-certificates
	# cd /usr/share/ca-certificates~~/local~~		# cd /usr/local/share/ca-certificates
	# curl https://web.entrust.com/root-certificates/entrust_l1k.cer > entrust_l1k.cer		# curl https://web.entrust.com/root-certificates/entrust_l1k.cer > entrust_l1k.cer
	# curl https://web.entrust.com/root-certificates/entrust_g2_ca.cer > entrust_g2_ca.cer		# curl https://web.entrust.com/root-certificates/entrust_g2_ca.cer > entrust_g2_ca.cer

Leo: /* Installing certificates */

2024-05-17T18:53:23Z

Installing certificates

← Older revision		Revision as of 18:53, 17 May 2024
Line 21:		Line 21:
	# wget https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1m_sha2.cer		# wget https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1m_sha2.cer
	# update-ca-trust extract		# update-ca-trust extract
			\| lang = terminal
			}}On Ubuntu:{{Highlight
			\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/ca-certificates/entrust_l1k.cer
			# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/ca-certificates/entrust_g2_ca.cer
			# wget https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O /usr/share/ca-certificates/entrust_l1m_sha2.cer
			# update-ca-certificates
	\| lang = terminal		\| lang = terminal
	}}On Debian:{{Highlight		}}On Debian:{{Highlight
	\| code = # mkdir -p /usr/share/ca-certificates/local		\| code = # mkdir -p /usr/share/ca-certificates/local
	# cd /usr/share/ca-certificates/local		# cd /usr/share/ca-certificates/local
	# ~~wget~~ https://web.entrust.com/root-certificates/entrust_l1k.cer -O entrust_l1k.cer		# curl https://web.entrust.com/root-certificates/entrust_l1k.cer > entrust_l1k.cer
	# ~~wget~~ https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O entrust_g2_ca.cer		# curl https://web.entrust.com/root-certificates/entrust_g2_ca.cer > entrust_g2_ca.cer
	# ~~wget~~ https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O entrust_l1m_sha2.cer		# curl https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer > entrust_l1m_sha2.cer
	# for i in *cer; do openssl x509 -inform PEM -in $i -outform PEM -out ${i%.cer}.crt ; done		# for i in *cer; do openssl x509 -inform PEM -in $i -outform PEM -out ${i%.cer}.crt ; done
	# update-ca-certificates		# update-ca-certificates
	\| lang = terminal		\| lang = terminal
	}}		}}

Leo: /* Installing certificates */

2024-05-17T18:52:05Z

Installing certificates

← Older revision		Revision as of 18:52, 17 May 2024
Line 22:		Line 22:
	# update-ca-trust extract		# update-ca-trust extract
	\| lang = terminal		\| lang = terminal
	}}On ~~Ubuntu~~:{{Highlight		}}On Debian:{{Highlight
	\| code = # mkdir -p /usr/share/ca-certificates/local		\| code = # mkdir -p /usr/share/ca-certificates/local
	# cd /usr/share/ca-certificates/local		# cd /usr/share/ca-certificates/local

Leo: /* Installing certificates */

2024-05-17T18:50:52Z

Installing certificates

← Older revision		Revision as of 18:50, 17 May 2024
Line 28:		Line 28:
	# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O entrust_g2_ca.cer		# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O entrust_g2_ca.cer
	# wget https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O entrust_l1m_sha2.cer		# wget https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O entrust_l1m_sha2.cer
	# for i in *cer; do openssl x509 -inform PEM -in $i -outform PEM -out $i.crt ; done		# for i in *cer; do openssl x509 -inform PEM -in $i -outform PEM -out ${i%.cer}.crt ; done
	# update-ca-certificates		# update-ca-certificates
	\| lang = terminal		\| lang = terminal
	}}		}}

Leo: /* Installing certificates */

2024-05-17T18:49:49Z

Installing certificates

← Older revision		Revision as of 18:49, 17 May 2024
Line 23:		Line 23:
	\| lang = terminal		\| lang = terminal
	}}On Ubuntu:{{Highlight		}}On Ubuntu:{{Highlight
	\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O ~~/usr/share/ca-certificates/~~entrust_l1k.cer		\| code = # mkdir -p /usr/share/ca-certificates/local
	# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O ~~/usr/share/ca-certificates/~~entrust_g2_ca.cer		# cd /usr/share/ca-certificates/local
	# wget https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O ~~/usr/share/ca-certificates/~~entrust_l1m_sha2.cer		# wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O entrust_l1k.cer
			# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O entrust_g2_ca.cer
			# wget https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O entrust_l1m_sha2.cer
			# for i in *cer; do openssl x509 -inform PEM -in $i -outform PEM -out $i.crt ; done
	# update-ca-certificates		# update-ca-certificates
	\| lang = terminal		\| lang = terminal
	}}		}}

Leo: /* Installing certificates */

2024-04-11T19:45:02Z

Installing certificates

← Older revision		Revision as of 19:45, 11 April 2024
Line 19:		Line 19:
	\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1k.cer		\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1k.cer
	# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_g2_ca.cer		# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_g2_ca.cer
	# wget https://web.entrust.com/root-certificates/~~entrust_l1m~~.cer -O /usr/share/pki/ca-trust-source/anchors/~~entrust_l1m~~.cer		# wget https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1m_sha2.cer
	# update-ca-trust extract		# update-ca-trust extract
	\| lang = terminal		\| lang = terminal
Line 25:		Line 25:
	\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/ca-certificates/entrust_l1k.cer		\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/ca-certificates/entrust_l1k.cer
	# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/ca-certificates/entrust_g2_ca.cer		# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/ca-certificates/entrust_g2_ca.cer
	# wget https://web.entrust.com/root-certificates/~~entrust_l1m~~.cer -O /usr/share/ca-certificates/~~entrust_l1m~~.cer		# wget https://web.entrust.com/root-certificates/entrust_l1m_sha2.cer -O /usr/share/ca-certificates/entrust_l1m_sha2.cer
	# update-ca-certificates		# update-ca-certificates
	\| lang = terminal		\| lang = terminal
	}}		}}

Leo at 19:39, 11 April 2024

2024-04-11T19:39:47Z

← Older revision		Revision as of 19:39, 11 April 2024
Line 19:		Line 19:
	\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1k.cer		\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1k.cer
	# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_g2_ca.cer		# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_g2_ca.cer
			# wget https://web.entrust.com/root-certificates/entrust_l1m.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1m.cer
	# update-ca-trust extract		# update-ca-trust extract
	\| lang = terminal		\| lang = terminal
Line 24:		Line 25:
	\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/ca-certificates/entrust_l1k.cer		\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/ca-certificates/entrust_l1k.cer
	# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/ca-certificates/entrust_g2_ca.cer		# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/ca-certificates/entrust_g2_ca.cer
			# wget https://web.entrust.com/root-certificates/entrust_l1m.cer -O /usr/share/ca-certificates/entrust_l1m.cer
	# update-ca-certificates		# update-ca-certificates
	\| lang = terminal		\| lang = terminal
	}}		}}

Leo at 19:04, 13 April 2022

2022-04-13T19:04:24Z

← Older revision		Revision as of 19:04, 13 April 2022
Line 16:		Line 16:

	=== Installing certificates ===		=== Installing certificates ===
	{{Highlight		On RHEL based systems:{{Highlight
	\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1k.cer		\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1k.cer
	# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_g2_ca.cer		# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_g2_ca.cer
	# update-ca-trust extract		# update-ca-trust extract
			\| lang = terminal
			}}On Ubuntu:{{Highlight
			\| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/ca-certificates/entrust_l1k.cer
			# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/ca-certificates/entrust_g2_ca.cer
			# update-ca-certificates
	\| lang = terminal		\| lang = terminal
	}}		}}

Leo: Created page with "Entrust is a certificate authority. == Troubleshooting == The Entrust Root Certification Authority (G2) doesn't appear to be part of the system root CA. As a result, if you try to `wget` or `curl` to a resource using certificates signed by Entrust, you'll get an error like the one below. {{Highlight | code = # wget -O - https://somewhere.ucalgary.ca/ --2022-03-29 16:58:39-- https://somewhere.ucalgary.ca/ Resolving somewhere.ucalgary.ca (somewhere...."

2022-03-29T23:11:01Z

Created page with "Entrust is a certificate authority. == Troubleshooting == The Entrust Root Certification Authority (G2) doesn't appear to be part of the system root CA. As a result, if you try to <code>wget</code> or <code>curl</code> to a resource using certificates signed by Entrust, you'll get an error like the one below. {{Highlight | code = # wget -O - https://somewhere.ucalgary.ca/ --2022-03-29 16:58:39-- https://somewhere.ucalgary.ca/ Resolving somewhere.ucalgary.ca (somewhere...."

New page

Entrust is a certificate authority.

== Troubleshooting ==
The Entrust Root Certification Authority (G2) doesn't appear to be part of the system root CA. As a result, if you try to <code>wget</code> or <code>curl</code> to a resource using certificates signed by Entrust, you'll get an error like the one below.
{{Highlight
| code = # wget -O - https://somewhere.ucalgary.ca/
--2022-03-29 16:58:39-- https://somewhere.ucalgary.ca/
Resolving somewhere.ucalgary.ca (somewhere.ucalgary.ca)... 10.43.144.134
Connecting to somewhere.ucalgary.ca (somewhere.ucalgary.ca){{!}}10.43.144.134{{!}}:443... connected.
ERROR: cannot verify somewhere.ucalgary.ca's certificate, issued by ‘CN=Entrust Certification Authority - L1K,OU=(c) 2012 Entrust\\, Inc. - for authorized use only,OU=See www.entrust.net/legal-terms,O=Entrust\\, Inc.,C=US’:
Unable to locally verify the issuer's authority.
To connect to somewhere.ucalgary.ca insecurely, use `--no-check-certificate'.
| lang = terminal
}}
To fix this, you'll need to install the root and chain certificates that are provided by Entrust at https://www.entrust.com/resources/certificate-solutions/tools/root-certificate-downloads.

=== Installing certificates ===
{{Highlight
| code = # wget https://web.entrust.com/root-certificates/entrust_l1k.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_l1k.cer
# wget https://web.entrust.com/root-certificates/entrust_g2_ca.cer -O /usr/share/pki/ca-trust-source/anchors/entrust_g2_ca.cer
# update-ca-trust extract
| lang = terminal
}}