linux - 如何从 Mono 证书存储 My 和 Trust 中删除/删除证书？

Question

我已在 Linux 中使用以下命令将证书添加到 Mono 3.2.8 存储区。

    certmgr -add -c -m My mycert.cer

添加的证书可以查看

    certmgr -list -c -m My mycert.cer

使用以下命令删除之前添加的证书。但是证书没有被删除。该命令没有给出任何错误消息。

    certmgr -del -c -m My mycert.cer

1. 如何从商店(My、CA、Trust 等)中删除证书？
2. Mono 在系统中的什么位置存储证书详细信息？

我尝试使用命令 mozroots 添加证书，但默认情况下它会尝试将证书添加到商店地址簿。 (我找不到任何命令来从商店 My 或 Trust 中删除证书)

    mozroots --import --machine --sync
    certmgr -ssl -m https://test:1200/service

Answer 1

1. How to remove the certificate from the stores (My,CA,Trust etc)?

运行这个命令:

certmgr -del -c -v -m Trust CERTHASH

其中 CERTHASH 是 Unique Hash 中的数字(您可以运行 certmgr -list -c -v -m YOURSTORE 提取此值，请参阅我的末尾的示例答案):

2. Where is Mono storing the certificate details in the system?

在其中一些路径中:

/usr/share/.mono/certs/
~/.config/.mono/certs/

例子:

将新证书添加到 Trust 存储(有效存储为:My、AddressBook、CA、信任 和不允许):

me@myserver:~$ certmgr -add -c -v -m Trust google.cer 
Mono Certificate Manager - version 3.2.6.0
Manage X.509 certificates and CRL from stores.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

1 certificate(s) added to store Trust.

列出证书:

me@myserver:~$ certmgr -list -c -v -m Trust
Mono Certificate Manager - version 3.2.6.0
Manage X.509 certificates and CRL from stores.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

X.509 v3 Certificate
  Serial Number: 7CBE60802548D325
  Issuer Name:   C=US, O=Google Inc, CN=Google Internet Authority G2
  Subject Name:  C=US, S=California, L=Mountain View, O=Google Inc, CN=*.google.com
  Valid From:    10/09/2014 14:03:47
  Valid Until:   09/12/2014 0:00:00
  Unique Hash:   4D348D0E4028C850A7C783413571111E8E3BD9DE
  Key Algorithm:        1.2.840.113549.1.1.1
  Algorithm Parameters: 0500
  Public Key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
  Signature Algorithm:  1.2.840.113549.1.1.5
  Algorithm Parameters: 0500
  Signature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
  Private Key:          False
  KeyPair Key:          False

删除证书:

me@myserver:~$ certmgr -del -c -v -m Trust 4D348D0E4028C850A7C783413571111E8E3BD9DE