Import CA certs

Update CA certs on Collector with GEA CA certificates

Download certs

Get root and issuing certificates from http://pki.gea.com/cps/default.htm

Convert .crt to .pem

Transfer crt files to Collector /tmp folder

# As root
cd /tmp
openssl x509 -inform DER -outform PEM -in GEA_RootRev1.crt -out GEA_RootRev1.crt.pem
openssl x509 -inform DER -outform PEM -in GEA_Issuing03Rev1.crt -out GEA_Issuing03Rev1.crt.pem

Create CA bundle

# As root
cd /tmp
cat GEA_RootRev1.crt.pem > GEA_ca_bundle.pem
cat GEA_Issuing03Rev1crt.pem >> GEA_ca_bundle.pem

Update system certificates

# As root
cp /tmp/GEA_ca_bundle.pem  /etc/pki/ca-trust/source/anchors
update-ca-trust