Page Comparison

...

Given a CA certificate file foo.crtpem, follow these steps to install it on Snare Central:

1. Create a directory for extra CA certificates in /usr/local/share/ca-certificates:

   Code Block
   sudo mkdir /usr/local/share/ca-certificates/SAM

2. Copy the CA .crtpem file to this directory:

   Code Block
   sudo cp foo.crtpem /usr/local/share/ca-certificates/SAM/foo.crtpem

3. Let Snare Central add the .crtpem file's path relative to /usr/local/share/ca-certificates to /etc/ca-certificates.conf:

   Code Block
   sudo update-ca-certificates

4. Restart SAM:

...

1. Go to SAM UI to “Settings” → “General”

2. Choose the correct certifciate certificate in “Agent HTTPS Certificate”

NOTE: In case of a .pem file on Snare Central, it must first be converted to a .crt file:

openssl x509 -in foo.pem -inform PEM -out foo.crt

Or a .cer file can be converted to a .crt file:

...