I am following this blog post to set up ASP.net MVC5 on Linux. When I get to the part that adds the Microsoft certificates, I am warned that they are invalid. For example, this command:
certmgr -ssl -m https://go.microsoft.com
returns the following:
Mono Certificate Manager - version 220.127.116.11 Manage X.509 certificates and CRL from stores. Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed. X.509 Certificate v3 Issued from: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root Issued to: C=US, S=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT SSL SHA2 Valid from: 12/19/2013 8:07:32 PM Valid until: 12/19/2017 8:06:55 PM *** WARNING: Certificate signature is INVALID *** Import this certificate into the CA store ?
I'm just doing this on a test box right now, so I went ahead and approved it. But, I have the hopes of going to production with this in the future. I have limited trust of Microsoft already and know they are a large target.
- Snarky: Is this a silly philosophical difference, just because the Linux community doesn't trust Microsoft?
- Is there a way I can view or inspect the certificate it's downloading, without having to use a browser?
From there I think I can Google enough stuff to figure out what the actual problem is. Two thoughts I have are: