This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Importing a CA certificate file created with OpenSSL

  • 2 replies
  • 23 have this problem
  • 1 view
  • Last reply by Bruce Cran

Bruce Cran
Bruce Cran
more options

I'm trying to import a CA file I created with OpenSSL's CA.sh utility. Firefox doesn't see it as being valid though: when I try and import cacert.pem I get the error "This is not a certificate authority certificate, so it can't be imported into the certificate authority list". I've tried removing all the text before ----BEGIN CERTIFICATE----- but it doesn't help. What am I missing?

I'm trying to import a CA file I created with OpenSSL's CA.sh utility. Firefox doesn't see it as being valid though: when I try and import cacert.pem I get the error "This is not a certificate authority certificate, so it can't be imported into the certificate authority list". I've tried removing all the text before ----BEGIN CERTIFICATE----- but it doesn't help. What am I missing?

Chosen solution

Maybe try here: http://groups.google.com/group/mozilla.dev.tech.crypto?lnk=

Read this answer in context 👍 1

All Replies (2)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Chosen Solution

Maybe try here: http://groups.google.com/group/mozilla.dev.tech.crypto?lnk=

Modified by cor-el

Bruce Cran
Bruce Cran Question owner
more options

Thanks, it turned out the OpenSSL CA.sh script creates a certificate which is in the wrong format - running openssl manually worked.