2014-09-18 150 views
7

我通過在Linux中使用以下命令將證書添加到Mono 3.2.8存儲中。如何從Mono證書商店中刪除/移除證書My和Trust?

certmgr -add -c -m My mycert.cer 

添加的證書可以通過

certmgr -list -c -m My mycert.cer 

使用下面的命令來刪除先前添加的證書來查看。但是證書沒有被刪除。該命令沒有給出任何錯誤報告。

certmgr -del -c -m My mycert.cer 
  1. 如何從商店(我,CA,信託等?)證書
  2. 如果是單聲道存儲在系統中的證書的詳細信息?

我試圖通過使用命令mozroots添加證書,但默認情況下它試圖將證書添加到商店AddressBook。 (我找不到任何命令從店裏我或者信託刪除證書)

mozroots --import --machine --sync 
    certmgr -ssl -m https://test:1200/service 

回答

13
  1. 如何從商店(我,CA,信託等)的證書?

運行此命令:

certmgr -del -c -v -m Trust CERTHASH 

凡CERTHASH是Unique Hash數量(可以提取運行certmgr -list -c -v -m YOURSTORE這個值,請參閱我的回答的最後爲例):

  1. Mono將證書詳細信息存儲在系統中的位置?

在一些路徑:

/usr/share/.mono/certs/ 
~/.config/.mono/certs/ 

例子:

添加新證書,Trust存儲(有效門店:MyAddressBookCATrustDisallowed):

[email protected]:~$ certmgr -add -c -v -m Trust google.cer 
Mono Certificate Manager - version 3.2.6.0 
Manage X.509 certificates and CRL from stores. 
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed. 

1 certificate(s) added to store Trust. 

列表證書:

[email protected]:~$ certmgr -list -c -v -m Trust 
Mono Certificate Manager - version 3.2.6.0 
Manage X.509 certificates and CRL from stores. 
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed. 

X.509 v3 Certificate 
    Serial Number: 7CBE60802548D325 
    Issuer Name: C=US, O=Google Inc, CN=Google Internet Authority G2 
    Subject Name: C=US, S=California, L=Mountain View, O=Google Inc, CN=*.google.com 
    Valid From: 10/09/2014 14:03:47 
    Valid Until: 09/12/2014 0:00:00 
    Unique Hash: 4D348D0E4028C850A7C783413571111E8E3BD9DE 
    Key Algorithm:  1.2.840.113549.1.1.1 
    Algorithm Parameters: 0500 
    Public Key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
    Signature Algorithm: 1.2.840.113549.1.1.5 
    Algorithm Parameters: 0500 
    Signature:   39250E018CA35E143782C4A3DCD416D7C36BFDE91C20936AF691478B5C15733AA17127687656B702EBFCE79D3C8C5A69A40B75AD797E0E3435688F7B5145699990A2F7330C5437D404E94CD9D596CBB7005661EC27AB4A21541510F3CC6B9020CDEC703AF3BCFCA0BEC6799AF93C1FE0CC25FAABA28F2F06362616C4C44164CDE3C78A7CF6D6F025BFA79476664FB0565C5FC5C9864D9B49078FE34B915CC40DE5B36C4D1E631F944B103CDF8F9CD87F19566AA7B4AFC16981EE2FF3B7FC8236CE722D976F9A8FD3A76B80828B59CE8381260276966892AC3693014CA4559189656EFCB26D90C2B363758E1EAD458AD79885E2B2BFC1CAE883E89882BE3BBA19 
    Private Key:   False 
    KeyPair Key:   False 

刪除證書:

[email protected]:~$ certmgr -del -c -v -m Trust 4D348D0E4028C850A7C783413571111E8E3BD9DE 
+1

感謝Gooseman,我會嘗試你的意見 – Ullan 2014-09-18 17:55:52