User Tools

Site Tools


userspace:zertifikats_import

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
userspace:zertifikats_import [2012/10/26 11:47]
tobias
userspace:zertifikats_import [2013/05/11 12:35]
tobias
Line 2: Line 2:
 Script by tobias \\ Script by tobias \\
 Comments and improvements welcome \\ Comments and improvements welcome \\
 +This script comes with ABSOLUTELY NO WARRANTY \\
 +
  
 Tested with opsi 4.0.2 \\ Tested with opsi 4.0.2 \\
Line 7: Line 9:
 Tested with Windows 7 Enterprise x86 \\ Tested with Windows 7 Enterprise x86 \\
  
-If you want to use the OPSI Software Kiosk you have one Problem: The certificate errors.<br> +If you want to use the OPSI Software Kiosk you have one Problem: The certificate errors.\\ 
-This OPSI-Package generates a new OPSI Client certificate with 2 domains in it. +This OPSI-Package generates a new OPSI Client certificate with 2 domains in it.\\ 
-The hostname and localhost.<br> +The hostname and localhost.\\ 
-After that the script imports the new certificate into the local certificate storage on the Client.+After that the script imports the new certificate into the local certificate storage on the Client.\\ 
 + 
 +Attention: Firefox has it's own Certificate Storage !\\ 
 +Achtung: Firefox verwendet nicht den Windows Zertifikatsspeicher !\\ 
 + 
 +( comment from wolfbardo : you can use the mozilla-nss utils to import in mozilla certifikate storage \\  
 +see https://forum.opsi.org/wiki/userspace:mozilla_nss ) \\ 
 + 
 +You need the CertMgr.Exe. \\ 
 +Copy this tool into your package folder (%SCRIPTPATH%)\\ 
 +CertMgr is available as part of the Windows SDK.      [[http://go.microsoft.com/fwlink/p/?linkid=84091]] 
  
-Attention: Firefox has it's one Certificate Storage !<br> +Every time you reinstall or update the Opsi-Client-Agent you must set this package to setup again. The Opsi-Client-Agent installer will override your own certificate...
-Achtung: Firefox verwendet nicht den Windows Zertifikatsspeicher ! <br>+
  
-You need the CertMgr.Exe +After using this script, restart your client!
 ==== import.ins ==== ==== import.ins ====
  
Line 59: Line 71:
  
 "%ProgramFiles32Dir%\openssl\bin\openssl" req -new -x509 -days 1000 -nodes -config %Systemdrive%\TEMP\opsiclientd.cnf -out "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem" -keyout "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem" "%ProgramFiles32Dir%\openssl\bin\openssl" req -new -x509 -days 1000 -nodes -config %Systemdrive%\TEMP\opsiclientd.cnf -out "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem" -keyout "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem"
-net stop opsiclientd +
-net start opsiclientd+
  
 [DosInAnIcon_Import] [DosInAnIcon_Import]
userspace/zertifikats_import.txt · Last modified: 2021/08/23 08:37 (external edit)