Sectigo AddTrust expiration External CA Root Expiring May 30, 2020

For more info and the fix see https://support.sectigo.com/articles/Knowledge/Sectigo-AddTrust-External-CA-Root-Expiring-May-30-2020

To update the Root CA Certificate on Ubuntu use the below commands

Log in to the USS Gateway device as a root user (see Accessing the Command Line)

Run: nano /etc/ca-certificates.conf and use the arrow keys to find the line containing “AddTrust_External_Root.crt” or “AddTrustExternalRoot.crt”

Delete the whole line

Save the file by holding down Ctrl and pressing the letter O and then and exit by holding down Ctrl and pressing the letter X

Remove the old AddTrust_External_Root.crt certificate file by running the following commands. One command may fail, this is expected as it will be in one of the two locations depending on your system.

rm /usr/local/share/ca-certificates/AddTrustExternalRoot.crt
rm /usr/share/ca-certificates/mozilla/AddTrust_External_Root.crt

Run: update-ca-certificates --fresh

Run: /etc/init.d/uss-squid stop

Wait 10 seconds

Run: /etc/init.d/uss-squid start

If you found this article helpful, would you consider buying me a Coffee?