Mailing List Archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [tlug] Adding a private ca certificate to openssl on centos

On Sat, Aug 11, 2012 at 05:51:56PM +1200, Glen Ogilvie wrote:
> On Wed, Aug 8, 2012 at 10:48 PM, Francois Cartegnie <>wrote:
> > Le 08/08/2012 10:55, Edward Middleton a écrit :
> > > Any pointers would be appreciated.
> >
> > /etc/pki/tls/certs/ca-bundle.crt
> > Looks like the right place for system's certificates.
> >
> > The file looks like a text output, so I guess
> >
> > openssl x509 -text -in yourca.crt >> /etc/pki/tls/certs/ca-bundle.crt
> I agree, this is where I put it last time I had to add one.

Yes, there is no tool for this currently.
The modified ca-bundle.crt will not be overwritten when the package
is updated - thus ca-certs that get removed in newer versions of the
package will still be in your ca-bundle.crt .
So ca-bundle.crt.rpmnew files should be merged in.


Home | Main Index | Thread Index

Home Page Mailing List Linux and Japan TLUG Members Links