Re: [tlug] Adding a private ca certificate to openssl on centos

[Christian Horn <chorn@example.com>]

On Sat, Aug 11, 2012 at 05:51:56PM +1200, Glen Ogilvie wrote:
> On Wed, Aug 8, 2012 at 10:48 PM, Francois Cartegnie <fcartegnie@example.com>wrote:
> > Le 08/08/2012 10:55, Edward Middleton a écrit :
> > > Any pointers would be appreciated.
> >
> > /etc/pki/tls/certs/ca-bundle.crt
> > Looks like the right place for system's certificates.
> >
> > The file looks like a text output, so I guess
> >
> > openssl x509 -text -in yourca.crt >> /etc/pki/tls/certs/ca-bundle.crt
> 
> I agree, this is where I put it last time I had to add one.

Yes, there is no tool for this currently.
The modified ca-bundle.crt will not be overwritten when the package
is updated - thus ca-certs that get removed in newer versions of the
package will still be in your ca-bundle.crt .
So ca-bundle.crt.rpmnew files should be merged in.

Christian