Troubleshooting update-ca-certificates: Permission denied

[paperscreen]

I am trying to update certs for K3 and I am getting this error:

/etc/ssl/certs$ update-ca-certificates
-sh: update-ca-certificates: Permission denied

Using WinSCP and it looks like I am log in as a root.

/etc/ssl/certs$ ls -l $(which update-ca-certificates)
-rw-r--r-- 1 root root 13831 Jan 19 14:27 ca-certificates.conf

[paperscreen]

I added execute permission for update-ca-certificates with:

chmod +x /usr/sbin/update-ca-certificates

And then I modified update-ca-certificates file and looks like was able to update certs:

/$ update-ca-certificates
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.

Now I have bunch of pem certs in ssl/cert folder.

Unfortunately still not able to get secure connection with webpages.

Then

Deleted all in ssl/cert folder and updated again:

/etc/ssl/certs$ update-ca-certificates
Updating certificates in /etc/ssl/certs...
openssl:Error: 'rehash' is an invalid command.

Standard commands
asn1parse ca ciphers crl crl2pkcs7
dgst dh dhparam dsa dsaparam
ec ecparam enc engine errstr
gendh gendsa genrsa nseq ocsp
passwd pkcs12 pkcs7 pkcs8 prime
rand req rsa rsautl s_client
s_server s_time sess_id smime speed
spkac verify version x509

Message Digest commands (see the `dgst' command for more details)
md2 md4 md5 rmd160 sha
sha1

Cipher commands (see the `enc' command for more details)
aes-128-cbc aes-128-ecb aes-192-cbc aes-192-ecb aes-256-cbc
aes-256-ecb base64 bf bf-cbc bf-cfb
bf-ecb bf-ofb cast cast-cbc cast5-cbc
cast5-cfb cast5-ecb cast5-ofb des des-cbc
des-cfb des-ecb des-ede des-ede-cbc des-ede-cfb
des-ede-ofb des-ede3 des-ede3-cbc des-ede3-cfb des-ede3-ofb
des-ofb des3 desx idea idea-cbc
idea-cfb idea-ecb idea-ofb rc2 rc2-40-cbc
rc2-64-cbc rc2-cbc rc2-cfb rc2-ecb rc2-ofb
rc4 rc4-40

140 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.

It seems like the update-ca-certificates command has run successfully, and 140 certificates were added. The warning about 'rehash' being an invalid command can be safely ignored in this context. The system has been updated with the new certificates, and the hooks have been executed.

Still no secure connection.

[mergen3107]

Please do not cross-post! You have posted the same information in 3 threads.
If you didn't get the reply, that means no one knows, and those who might know haven't read this yet.

In the meantime, try updating certificates by hand.
Make sure to preserve the Amazon-specific ones in the top of the certificate file.

[paperscreen]

Sorry. I wanted to keep all the post updated for other users.

How do I update certs by hand?

[paperscreen]

Even though it looks like update was successful the certs don't seems to be updated:

openssl version
OpenSSL 0.9.8j 07 Jan 2009