Hi @lmori,
I tried that, but so far it didn't work.
First, shouldn't that be: sudo -u minemeld mm-cabundle-update ?
Second:
I exported my forward decryption certificate from my PA in PEM format and created a file
pa820SubCA.crt
in
/opt/minemeld/local/CA/site
Then I ran:
/opt/minemeld/local/certs$ sudo -u minemeld mm-cabundle-update 2018-03-26T23:14:19 (101237)cacert_merge.main INFO: config: {'cafile': ['/opt/minemeld/local/certs/site/'], 'dst': '/opt/minemeld/local/certs/bundle.crt', 'config': '/opt/minemeld/local/certs/cacert-merge-config.yml', 'no_merge_certifi': False} WARNING: old python version (< 2.7.9) - certificate verification not performed
I'm seeing
/opt/minemeld/local/certs$ ls -la total 312 drwxr-xr-x 4 minemeld minemeld 4096 Mar 26 22:50 . drwxr-xr-x 9 minemeld minemeld 4096 Mar 26 23:00 .. -rw------- 1 minemeld minemeld 296399 Mar 26 23:14 bundle.crt drwxr-xr-x 3 minemeld minemeld 4096 Mar 26 22:38 CA -rw-r--r-- 1 minemeld minemeld 25 Oct 2 14:17 cacert-merge-config.yml drwxr-xr-x 2 minemeld minemeld 4096 Oct 2 14:18 site
I don't see my certificate getting added in bundle.crt
Did I miss anything?
Regards,
Andreas
... View more