User Tools

Site Tools


userspace:zertifikats_import

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
userspace:zertifikats_import [2012/10/26 11:47]
tobias
userspace:zertifikats_import [2021/08/23 08:37] (current)
Line 1: Line 1:
 +====== +++ Since new OPSI KIOSK application, this is not necessary anymore +++ ======
 +
 ======ImportCert====== ======ImportCert======
 Script by tobias \\ Script by tobias \\
 Comments and improvements welcome \\ Comments and improvements welcome \\
 +This script comes with ABSOLUTELY NO WARRANTY \\
 +
  
 Tested with opsi 4.0.2 \\ Tested with opsi 4.0.2 \\
Line 7: Line 11:
 Tested with Windows 7 Enterprise x86 \\ Tested with Windows 7 Enterprise x86 \\
  
-If you want to use the OPSI Software Kiosk you have one Problem: The certificate errors.<br> +If you want to use the OPSI Software Kiosk you have one Problem: The certificate errors.\\ 
-This OPSI-Package generates a new OPSI Client certificate with 2 domains in it. +This OPSI-Package generates a new OPSI Client certificate with 2 domains in it.\\ 
-The hostname and localhost.<br> +The hostname and localhost.\\ 
-After that the script imports the new certificate into the local certificate storage on the Client.+After that the script imports the new certificate into the local certificate storage on the Client.\\
  
-Attention: Firefox has it'one Certificate Storage !<br> +Attention: Firefox has it'own Certificate Storage !\\ 
-Achtung: Firefox verwendet nicht den Windows Zertifikatsspeicher ! <br>+Achtung: Firefox verwendet nicht den Windows Zertifikatsspeicher !\\
  
-You need the CertMgr.Exe +( comment from wolfbardo : you can use the mozilla-nss utils to import in mozilla certifikate storage \\  
 +see https://forum.opsi.org/wiki/userspace:mozilla_nss ) \\ 
 + 
 +You need the CertMgr.Exe. \\ 
 +Copy this tool into your package folder (%SCRIPTPATH%)\\ 
 +CertMgr is available as part of the Windows SDK.      [[http://go.microsoft.com/fwlink/p/?linkid=84091]] 
 + 
 + 
 +Every time you reinstall or update the Opsi-Client-Agent you must set this package to setup again. The Opsi-Client-Agent installer will override your own certificate... 
 + 
 +After using this script, restart your client!
 ==== import.ins ==== ==== import.ins ====
  
Line 59: Line 73:
  
 "%ProgramFiles32Dir%\openssl\bin\openssl" req -new -x509 -days 1000 -nodes -config %Systemdrive%\TEMP\opsiclientd.cnf -out "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem" -keyout "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem" "%ProgramFiles32Dir%\openssl\bin\openssl" req -new -x509 -days 1000 -nodes -config %Systemdrive%\TEMP\opsiclientd.cnf -out "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem" -keyout "%ProgramFiles32Dir%\opsi.org\opsi-client-agent\opsiclientd\opsiclientd.pem"
-net stop opsiclientd +
-net start opsiclientd+
  
 [DosInAnIcon_Import] [DosInAnIcon_Import]
userspace/zertifikats_import.1351252045.txt.gz · Last modified: 2021/08/23 08:37 (external edit)