_______ ____ ____ __  __ ____  __   ______ ______
/_   __// __// __// /_/ // _ / / /  / __  // ____/
  / /  / __// /_ / __  // _ < / /_ / /_/ // /_  /
 /_/  /___//___//_/ /_//____//___//_____//_____/
  techblog.koponen.se

 [ / ] [ howto ] [ reviews ] [ webapps ] [ youtube ] [ links ] [ about ]
-------------------------------------------------------------------------

  techblog.koponen.se
 
 [ / ] 
 [ howto   ] [ reviews ] [ webapps ] 
 [ youtube ] [ about   ] [ links   ] 
-------------------------------------

HOWTO
CERTIFICATES
ADD YOUR OWN CA TO GOOGLE CHROME

Published: 20181119
Updated: 20220203

Instructions for:
* Linux
* Windows

Verify your certificate file with:
* OpenSSL

Linux
Updated: 20220203

Tested on:
- Google Chrome Version: Version 98.0.4758.80 (Official Build) (64-bit)
- OS: Ubuntu 20.04.3 amd64

• Press the three-dots-menu (top right)
• Press "Settings"
• In the menu to left, press "Security and Privacy"
• In the menu that popped up in the middle, press "Security"
• Scroll down to the bottom and press "Manage certificates (Manage HTTPS/SSL certificates and settings)"
• Press the "tab" named "Authorities"
• Press "Import..."
• Press "Browse..." and choose your "CA.crt" file
  • MAKE SURE THIS FILE IS REALLY REALLY REALLY VERIFIED BEFORE YOU ADD IT
• Press "Open"
• Check the box "Trust this certificate for identifying websites"
• Press "OK"

Microsoft Windows
Updated: 20181119

Tested on:
- Google Chrome Version: Version 70.0.3538.77 (Official Build) (64-bit)
- OS: Windows 8.1 Pro 64bit

• Press the three-dots-menu (top right)
• Press "Settings"
• Scroll down to the bottom and press "Advanced"
• In the section "Privacy and security", press "Manage certificates (Manage HTTPS/SSL certificates and settings)"
• Press "Import..."
• Press "Next"
• Press "Browse..." and choose your "CA.crt" file
  • MAKE SURE THIS FILE IS REALLY REALLY REALLY VERIFIED BEFORE YOU ADD IT
• Press "Next"
• Choose "Place all certificates in the following store"
• Press "Browse..."
• Choose "Trusted Root Certification Authorities"
• Press "OK"
• "Certificate store:" should now say "Trusted Root Certification Authorities"
• Press "Next"
• Review and press "Finish"
• You should now get a "Security Warning"
• Verify the certificate fingerprint [1]
• When you verified the certificate, press "Yes"
• "The import was successful" press "OK"

You might need to restart your browser, maybe even repeat the import

-

[1]:

Verify your certificate

You can verify the Thumbprint with openssl and one of these commands:

openssl x509 -noout -fingerprint -md5    -inform pem -in myCA.crt  
openssl x509 -noout -fingerprint -sha1   -inform pem -in myCA.crt  
openssl x509 -noout -fingerprint -sha256 -inform pem -in myCA.crt