Installing CA Certificates

When using a school or work network, you may be required to install a Root CA certificate to allow you to browse to secure websites (those that use HTTPS, which includes most websites nowadays!). The Root CA certificate is required because the traffic is being decrypted by the firewall or filter, then re-encrypted.

Internet browsers and OS libraries will rightly detect this as a man-in-the-middle (MITM) attack, and will therefore throw up errors preventing you from continuing to load the page. Installing the required CA certificate will resolve these issues, but you must be aware that this means all traffic will be viewable by your school or employer.

Copying the certificate

sudo cp mycert.cer /usr/share/ca-certificates/mycert.pem

 

Enabling the certificate

sudo dpkg-reconfigure ca-certificates

 

Updating the certificate cache

sudo update-ca-certificates

 

If using git

git config --global http.sslCAInfo /usr/share/ca-certificates/mycert.pem