Skip to content

Instantly share code, notes, and snippets.

@arnauldvm
Last active November 5, 2019 09:32
Show Gist options
  • Save arnauldvm/cf293e2dd1913b520bfa970dc1465798 to your computer and use it in GitHub Desktop.
Save arnauldvm/cf293e2dd1913b520bfa970dc1465798 to your computer and use it in GitHub Desktop.
Trusting additional CAs in Fedora / RHEL / CentOS

https://www.happyassassin.net/2015/01/14/trusting-additional-cas-in-fedora-rhel-centos-dont-append-to-etcpkitlscertsca-bundle-crt-or-etcpkitlscert-pem/

On Fedora since 19, RHEL / CentOS 7, and RHEL / CentOS 6 since this update, the Shared System Certificates feature is available. With that system, the correct method is to place the certificate to be trusted (in PEM format) in /etc/pki/ca-trust/source/anchors/ and run sudo update-ca-trust. (If the certificate is in OpenSSL’s extended BEGIN TRUSTED CERTIFICATE format, place it in /etc/pki/ca-trust/source).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment