Chapter 20: Installing CA Certificates
CA certificates can only be installed on egnite Qeuerx WLAN.
When establishing an encrypted connection to a configured email server or a
cloud server, a certificate is transferred from the server. This is intended to
ensure that this is the required server. In order to verify this, however, the
certificate of the certification authority (CA) that is listed in the server's certificate
is required. PC web browsers have certificates of far more than a hundred
certification authorities pre-installed and update these periodically. This would be
an unreasonably elaborate process for Querx.
Compared to a web browser, Querx will usually communicate with very few
servers. Thus, it will suffice to save the certificates of a small number of
certification authorities. These need to be saved in a file in the PEM format and
installed as content on Querx. Since this is a text-file, it can be created with any
text editor, e.g. Notepad.
In order for Querx to recognize CA certificates, the first line needs to begin with
add=, followed by the file path /ssl/ca.crt. The second line needs to be left blank.
The full file might look like this:
add=/ssl/ca.crt
-----BEGIN CERTIFICATE-----
MIIFazCCA1OgAwIBA...
...4O3sBc0V2m2TgGI
-----END CERTIFICATE-----
Proceed as follows to install the file:
Open the configuration page
Maintenance / Firmware
.
1.
Click
Browse
in the section
Install content
to select the file that contains the
certificate.
2.
Click
Upload
to save the file in the device's internal memory.
75
