Installing brave with a self signed certificate

Browser Support Desktop Support
1

Hello All,

I have opnsense firewall where I’ve installed squid web proxy as a invisible forward proxy to prevent access to things like instagram and facebook. In opnsense I create a new self signed root certificate. I then used this to generate certificates which I installed on our computers both in the ca store and the browsers. Works great. The problem is I can no longer update brave browser on the machines that have it, or install it on the machines that don’t.

In linux I’m getting this error in apt/nala;

Error: https://brave-browser-apt-release.s3.brave.com stable InRelease
Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification.

How do I get around this? I have listed .brave.com in my no bump list and set CURL_CA_BUNDLE environment variable. The variable allowed me to setup the source in apt, but that’s as far as I could get.

Any help would be greatly appreciated!

2

@jarguess

And you have tested different CA Certificate trust levels(?) - random screenshot of those (from my Mac, Keychain Access.app), for example (what needs to be enabled?):

cert_trust_levels
cert_trust_levels776×454 49.8 KB

Anyway, perhaps @fmarier will be able to help you.

3

That error comes from apt and not from Brave. So you’d have to add your extra root certificate to ca-certificates at the system-level. This might help:

1 Like