Adding a certificate to the system store: Difference between revisions

From WilliamsNet Wiki
Jump to navigation Jump to search
(Created page with "== Debian == Fortunately it is straightforward, since you can tell Ubuntu/Debian to update its root certificate list to include any certificates stored in the '''/usr/local/sh...")
 
mNo edit summary
 
Line 2: Line 2:
Fortunately it is straightforward, since you can tell Ubuntu/Debian to update its root certificate list to include any certificates stored in the '''/usr/local/share/ca-certificates''' directory.
Fortunately it is straightforward, since you can tell Ubuntu/Debian to update its root certificate list to include any certificates stored in the '''/usr/local/share/ca-certificates''' directory.


# upload the certificate to /usr/local/share/ca-certificates
# Upload the certificate to '''/usr/local/share/ca-certificates'''
#* anything with a .crt extension is automatically trusted
#* anything with a .crt extension is automatically trusted
#* if desired, you can create subdirectories to organize certificates
#* if desired, you can create subdirectories to organize certificates
# update the certificate bundle
# Update the certificate bundle
#: <pre>sudo update-ca-certificates</pre>
#: <pre>sudo update-ca-certificates</pre>
== CentOS ==
The process is similar, but (of course) with different locations and commands ...
# Upload certificates to '''/etc/pki/ca-trust/source/anchors'''
# Update the certificate bundle
#: <pre>sudo update-ca-trust</pre>

Latest revision as of 00:48, 6 August 2019

Debian[edit]

Fortunately it is straightforward, since you can tell Ubuntu/Debian to update its root certificate list to include any certificates stored in the /usr/local/share/ca-certificates directory.

  1. Upload the certificate to /usr/local/share/ca-certificates
    • anything with a .crt extension is automatically trusted
    • if desired, you can create subdirectories to organize certificates
  2. Update the certificate bundle
    sudo update-ca-certificates

CentOS[edit]

The process is similar, but (of course) with different locations and commands ...

  1. Upload certificates to /etc/pki/ca-trust/source/anchors
  2. Update the certificate bundle
    sudo update-ca-trust