如何从Mono证书商店My and Trust中删除/删除证书?

时间:2014-09-18 16:36:32

标签: linux ssl mono

我已在Linux中使用以下命令将证书添加到Mono 3.2.8商店。

    certmgr -add -c -m My mycert.cer

可以通过

查看添加的证书
    certmgr -list -c -m My mycert.cer

使用以下命令删除以前添加的证书。但证书没有被删除。该命令没有给出任何错误消息。

    certmgr -del -c -m My mycert.cer
  1. 如何从商店中删除证书(我的,CA,信任等?)
  2. Mono将证书详细信息存储在系统中的哪个位置?
  3. 我尝试使用命令mozroots添加证书,但默认情况下,它尝试将证书添加到商店AddressBook。 (我找不到任何从My或Trust商店中删除证书的命令)

        mozroots --import --machine --sync
        certmgr -ssl -m https://test:1200/service
    

1 个答案:

答案 0 :(得分:16)

  
      
  1. 如何从商店(我的,CA,信任等)中删除证书?
  2.   

运行此命令:

certmgr -del -c -v -m Trust CERTHASH

CERTHASH是Unique Hash中的数字(您可以提取此值certmgr -list -c -v -m YOURSTORE,请参阅我的答案末尾的示例):

  
      
  1. Mono将证书详细信息存储在系统中的哪个位置?
  2.   

在其中一些路径中:

/usr/share/.mono/certs/
~/.config/.mono/certs/

示例:

将新证书添加到Trust商店(有效商店为:MyAddressBookCATrustDisallowed):< / p>

me@myserver:~$ certmgr -add -c -v -m Trust google.cer 
Mono Certificate Manager - version 3.2.6.0
Manage X.509 certificates and CRL from stores.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

1 certificate(s) added to store Trust.

列出证书:

me@myserver:~$ certmgr -list -c -v -m Trust
Mono Certificate Manager - version 3.2.6.0
Manage X.509 certificates and CRL from stores.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

X.509 v3 Certificate
  Serial Number: 7CBE60802548D325
  Issuer Name:   C=US, O=Google Inc, CN=Google Internet Authority G2
  Subject Name:  C=US, S=California, L=Mountain View, O=Google Inc, CN=*.google.com
  Valid From:    10/09/2014 14:03:47
  Valid Until:   09/12/2014 0:00:00
  Unique Hash:   4D348D0E4028C850A7C783413571111E8E3BD9DE
  Key Algorithm:        1.2.840.113549.1.1.1
  Algorithm Parameters: 0500
  Public Key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
  Signature Algorithm:  1.2.840.113549.1.1.5
  Algorithm Parameters: 0500
  Signature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
  Private Key:          False
  KeyPair Key:          False

删除证书:

me@myserver:~$ certmgr -del -c -v -m Trust 4D348D0E4028C850A7C783413571111E8E3BD9DE