PKI Certificate Tutorials - Herong's Tutorial Examples

∟Linux Trust Store for CA Certificates

This chapter provides tutorial notes and example codes on Linux Trust Store. Topics include directory and files of Linux Trust Store; 'trust' command to list, search, extract certificates in Linux Trust Store.

Directory and Files of Linux Trust Store

"trust" Command to Manage Linux Trust Store

"trust list" - Search Certificates in Linux Trust Store

"trust extract" - Extract Certificates from Linux Trust Store

"trust dump" - Dump Information from Linux Trust Store

"trust anchor" - Add and Remove Certificates.

Conclusions:

• Linux Trust Store is a collection of root CA certificates with trust information.
• Linux Trust Store files are located at /etc/ssl/certs on most Linux computers
• "trust" command from the p11-kit package can be used to manage Linux Trust Store.
• "trust list" command searches certificates in Linux Trust Store.
• "trust extract" command extracts certificates from Linux Trust Store in different formats.
• "trust dump" command displays certificate information with trust flags. in different formats.
• "trust anchor" command adds/removes certificates, if configuration allows. in different formats.

Table of Contents

 About This Book

 Introduction of PKI (Public Key Infrastructure)

 Introduction of PKI Certificate

 PKI Certificate File Formats

 OpenSSL - Cryptography Toolkit

 "openssl ca" - CA (Certificate Authority) Tool

 Java "keytool" Commands and KeyStore Files

 PKI Certificate Store

 PKCS12 Certificate Bundle File

 PKCS7 Certificate Chain File

►Linux Trust Store for CA Certificates

 ca-certificates - Linux CA Certificate Package

 update-ca-trust Command on Red Hat Computers

 PKI Certificate Related Terminology

 References

 Full Version in PDF/EPUB

Linux Trust Store for CA Certificates - Updated in 2026, by Herong Yang