X-Git-Url: https://sipb.mit.edu/gitweb.cgi/wiki.git/blobdiff_plain/583fcedc71c26a238d93897fcec7f67c76533264..2e9dc106cb32606d1fd7d4e2dad8432ff5046e4a:/doc/enabling_client_certificate_auth_in_chrome.html diff --git a/doc/enabling_client_certificate_auth_in_chrome.html b/doc/enabling_client_certificate_auth_in_chrome.html index 4a00a42..4bf6bef 100644 --- a/doc/enabling_client_certificate_auth_in_chrome.html +++ b/doc/enabling_client_certificate_auth_in_chrome.html @@ -3,13 +3,13 @@ Turns out, this is relatively easy to solve, there's just no GUI for it as of yet. (As of 12/3/2009.) As far as I know, this only works with the daily build from the chromium-daily ppa on Launchpad. It might work on the official chrome build, if it works, please tell us. -if you're running Debian or Ubuntu, you can add "deb http://ppa.launchpad.net/chromium-daily/ppa/ubuntu karmic main" to your -/etc/apt/sources.list and then apt-get update +If you're running Debian or Ubuntu, you can add "deb http://ppa.launchpad.net/chromium-daily/ppa/ubuntu karmic main" to your +/etc/apt/sources.list and then apt-get update.

-

Installing Certificates

+

Installing Certificates

The simplest thing to do is go to the usual web interface and follow the instructions to install certs normally. You may also want the CSAIL CA (specifically, the Master CA). -If this works, you should be able to skip to the second part +If this works, you should be able to skip to telling chrome touse certtificate by default Failing that, the next easiest way to install a client cert in the nss database is simply to install it on Firefox; At that point, it should be in the list of certificates you get when you run "certutil -d sql:$HOME/.pki/nssdb -L". @@ -21,7 +21,7 @@ to install libnss3-tools, then run "certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n -i " for both the MIT CA and (if you want it) the CSAIL CA.

-

Using Certificates

+

Using Certificates

Here's the last key to the puzzle: Chrome on Linux currently lacks a UI for selecting a certificate, so run it with the --auto-ssl-client-auth flag.

To do this by default in Gnome, you want to edit both Preferred Applications and the Main Menu entry this way links you click on outside of Chrome open this way. (Gnome Do and similar pull their data from Main Menu, among other places.)