https://inasa.dev/blog/rss.xml

Debian | Install custom CA

2024-01-23
  1. 复制my_own_ca.crt到/usr/local/share/ca-certificates
  2. 执行update-ca-certificates

update-ca-certificates 创建必要的 simlink 并更新 /etc/ssl/certs/ca-certificates.crt 文件。

验证

/etc/ssl/certs# ls -alFh | grep my_own_ca
lrwxrwxrwx 1 root root   40 Jan 23 10:49  my_own_ca.pem -> /usr/local/share/ca-certificates/my_own_ca.crt

openssl crl2pkcs7 -nocrl -certfile /etc/ssl/certs/ca-certificates.crt | openssl pkcs7 -print_certs -noout
  • https://unix.stackexchange.com/questions/688608/is-it-possible-to-install-a-custom-ca-certificate-without-the-ca-certificates-pa