[tlug] Adding a private ca certificate to openssl on centos

[Edward Middleton <edward.middleton@example.com>]

Does anyone know how to at a private ca certificate to the centos/rhel
ca certificate bundle so that it will be picked up by applications?

In Gentoo you would do the following.

mkdir -p /usr/local/share/ca-certificates
(
cat <<'EOP'
-----BEGIN CERTIFICATE-----
..

-----END CERTIFICATE-----
EOP
) >> /usr/local/share/ca-certificates/private-ca.crt

/usr/sbin/update-ca-certificates --fresh

centos/rhel seems to be all over the place.  They seem to have a
concatenated pile of ca certs at

/etc/pki/tls/certs/ca-bundle.crt

but this doesn't seem like the right place to be adding a private ca
certificate.  They also have a makefile for generating self signed
certificates at

/etc/pki/tls/certs/Makefile

Any pointers would be appreciated.

Edward