EXA surfprotect.crt and CentOS Linux - How Do You Install It?

[Fazza]

I've just installed CentOS 7 Linux and need to download/run an online script and I'm getting certificate errors because I haven't installed Exa Networks SurfProtect.crt certificate on the machine, as I dont know how to!

 

So, how do you install a .crt certificate in Linux? I've managed to copy it to the VM to the root oc the drive so all I need to do now is install it!

 

[DJ-1701]

I must admit, I would be interested in that as well... but... I cheat and use the non https filtering proxy provided by Exa.

 

Note: This can be found by logging into the SurfProtect Panel webpage, and clicking Home at the top of the page, and look for the information about Basic HTTP filtering with no SSO. Please also note that the port used is 3128, although this may not be stated.

Edited May 21, 2018 by DJ-1701

[Marci]

SHOULD be a case of copying the crt to /etc/pki/ca-trust/source/anchors/ and running update-ca-trust extract

 

 

[houlta]

SHOULD be a case of copying the crt to /etc/pki/ca-trust/source/anchors/ and running update-ca-trust extract

 

 

 

Thats how I did it last time I had to.

NB: the cert had to be in .pem format for it to work.

[Fazza]

SHOULD be a case of copying the crt to /etc/pki/ca-trust/source/anchors/ and running update-ca-trust extract

 

 

 

So simple and it worked a treat!

 

[Fazza]

I must admit, I would be interested in that as well... but... I cheat and use the non https filtering proxy provided by Exa.

 

Note: This can be found by logging into the SurfProtect Panel webpage, and clicking Home at the top of the page, and look for the information about Basic HTTP filtering with no SSO. Please also note that the port used is 3128, although this may not be stated.

 

What's the command to configure the proxy then or is there a file I need to edit?

[houlta]

In the past we used to have a linux squid proxy we used in conjunction with surfprotect but we got told by Exa they weren't supporting it anymore and we had to get a stormshield firewall for surfprotect to work, then shortly afterwards Exa decided to move to using Fortinet....

Sigh

 

Ironic really as I've had some previous experience with Fortinet gear but Stormshield seems to be a little known product.

 

So I'm curious here as to what you're up to Fazza, are you trying to setup squid proxy?

[Marci]

I suspect we're talking as a workstation/client not as a server... as in: the CentOS box currently can't get out on to the web.

 

Configuring Web Proxy on CentOS ~ The Sysadmin Himself

 

If you need to pass authentication per user, then in each user's .bashrc file in their home directory add as necessary:

 

export http_proxy="http://username:password@yourproxy:port"
export https_proxy="http://username:password@yourproxy:port"
export ftp_proxy="http://username:password@yourproxy:port"
export no_proxy="localhost,127.0.0.1"

[Fazza]

So I'm curious here as to what you're up to Fazza, are you trying to setup squid proxy?

 

No idea what Squid Proxy is I'm afraid.

 

All I'm trying to do is get CentOS 7 to connect to the Internet!

 

We run our Asset Management system on a CentOS 7 VM and it's time to upgrade it but it doesn't work as it runs a script that it gets from the Internet that is going to https sites such as GitHub and fails. I've installed the exa-networks certificate but still getting errors as the machine wont be using a proxy that works as none are set as I haven't set any yet, hence this thread. If I had a GUI I think you can pretty much open up Firefox and configure the proxy settings there but this is not a client computer so no GUI is installed - it's just plain old CentOS 7 (DVD Install) with Basic Web Server option during the installation.

 

I'm new to Linux and the only way to learn how to do things is to get on and try and do them!

[DJ-1701]

What's the command to configure the proxy then or is there a file I need to edit?

 

If I remember correctly, post installation it can be set in /etc/profile with the two lines

 

export http_proxy=http://ProxyHere:PortHere/
export https_proxy=http://ProxyHere:PortHere/

[EXA_Mark]

Hi @Fazza

 

Have you managed to sort whatever you were trying to do? If not let me know and I'll get on our our team to give you a shout. We are a linux development house, as well as an ISP, so I am sure we can help.

[Fazza]

Hi @Fazza

 

Have you managed to sort whatever you were trying to do? If not let me know and I'll get on our our team to give you a shout. We are a linux development house, as well as an ISP, so I am sure we can help.

 

Yes thanks - all sorted! Just needed to know how to install the certificate and set a proxy - everything's easy when you know how and I've now documented what I did so can do it again in the future!