Installing CAcert root certificates

In order to stop warnings from email clients and web browsers it is necessary to install the CAcert root “Certificate Authority” certificates into your computers stores. Unfortunately different appplications use different stores. Follow the appropriate procedures below for each of the applications that you have installed/use.

Once this procedure is completed you should not be prompted for mismatching certificates on the Oldelvet servers again.

Internet Explorer/Outlook/Outlook Express

Internet Explorer and Microsoft email clients all use the same certificate store. The easiest approach is to use Internet Explorer to navigate to the CAcert root page and click on the appropriate certificates to run/install them.

 

CAcert download page in Internet Explorer Download/install both Root and Class 3 keys in PEM format.

 

Save the certificate to using Internet Explorer Choose “Save” to download and save the certificate file.

 

Choose certificate save location in Internet Explorer Save in a suitable location. The exact location is not important.

 

Certificate download completed select open to continue When the download is complete click “Open” to install the certificate.

 

Microsoft Windows install certificate dialog Use “Install Certificate” to initiate the install itself.

 

Microsoft Windows Install certificate wizard The certificate install wizard is now open. Click “Next” to move onto the next screen.

 

Microsoft Windows certificate location Accept the default save location.

 

Install certificate confirmation dialog Click finish to complete the install.

 

Install certificate final confirmation Confirm the install by clicking “Yes”.

 

Import wizard complete The install is now confirmed and is ready for use.

Firefox

Firefox uses its own certificate store. New entries can be added easily by following the PEM links from the CAcert root download page.

CAcert download page in Firefox Download/install both Root and Class 3 keys in PEM format.

 

Firefox certificate download dialog When prompted save accept the certificate for each of “web sites”, “email users” and “sofware developers”.

 

Thunderbird

Thunderbird uses its own certificate store in a similar way to Firefox. However this requires that you save the certificate files from the CAcert root keys download page and then import them manually.

Thunderbird Select the “Tools” -> “Options” menu entry.

 

Thunderbird select view certificates Under “Advanced” select the “Certificates” tab.

 

Thunderbird Certificate Manager When the Certificate Manager shows select the “Import” option.

 

Select certificate to import into Thunderbird Now select the previously saved root and class3 certificate file.

 

Thunderbird downloading certificate. Tick to trust “web sites”, “email users” and “software developers”. Then select “OK”.

 

Certificate manager with CAcert root installed The imported certificates will be visible under “Root CA” in the Authorities tab.

 

Opera

To install the certificates in Opera just visit the CAcert root keys download page and follow the next few simple steps.

CAcert download page in Opera Download both the root certificate and class3 certificate in PEM format.

 

Opera install certificate dialog Confirm that the certificate authority should be installed.

 

View certificate details in Opera Optionally view the certificate contents to make sure that it is authentic.

 

Confirm certificate import in Opera Confirm that certificate import.

 

iPhone

Navigate to the CAcert root page and then install each of the appropriate certificates.

CAcert download page in iPhone browser Visit the CACert download page and download the root and class3 certificates.

 

CACert install certificate initial dialog   Select “Install” to move the installation along.

 

iPhone install certificate confirmation dialog Confirm the installation.

 

iPhone certificate installing The installing profile dialog will show for a few seconds.

 

iPhone certificate installed   The installation is now confirmed.

 

Android Phone

To be completed.

Comments are closed.