Skip to content

Trust your CA on Linux

Mantas Mikulėnas edited this page Jan 31, 2017 · 10 revisions

Debian, Ubuntu

  1. Copy the certificate from db/certs/root-ca.crt to /usr/local/share/ca-certificates/company-ca.crt. (db is etc/ssl by default and company should be your company's name.)
  2. Run update-ca-certificates.

Fedora

  1. Copy the certificate from db/certs/root-ca.crt to /etc/pki/ca-trust/source/anchors/company-ca.crt. (db is etc/ssl by default and company should be your company's name.)
  2. Run update-ca-trust. This program is part of the "ca-certificates" package

More information: https://fedoraproject.org/wiki/Features/SharedSystemCertificates:Testing#How_to_add_a_systemwide_CA

Arch

Run trust anchor db/certs/root-ca.crt (as root) to import the CA automatically.

Manual method:

  1. Copy the certificate from db/certs/root-ca.crt to /etc/ca-certificates/trust-source/anchors/company-ca.crt.
  2. Run update-ca-trust. This program is part of the "ca-certificates" package