ca-certificates - Linux CA Certificate Package

PKI Certificate Tutorials - Herong's Tutorial Examples

∟ca-certificates - Linux CA Certificate Package

This chapter provides tutorial notes and example codes on the Linux CA Certificate Package. Topics include installing Mozilla trust root certificates with the 'ca-certificates' package; installing 'ca-certificates-java' and 'ca-certificates-mono' for Java and Mono (.NET) applications; adding and removing a CA certificate from the trust store.

What Is ca-certificates Package

What Is ca-certificates-java Package

What Is ca-certificates-mono Package

"update-ca-certificates" to Add CA Certificate

"update-ca-certificates" to Disable CA Certificate

"update-ca-certificates" vs "trust" on Debian/Ubuntu Computers

Conclusions:

"ca-certificates" package contains trusted root CA certificates provided by Mozilla Foundation.
/etc/ssl/certs/ca-certificates.crt is the default installation location of the Trust Store.
"ca-certificates-java" package is the JKS (Java KeyStore) version of "ca-certificates", which installs /etc/ssl/certs/java/cacerts.
"update-ca-certificates" command can be used add and remove CA certificate in the Trust Store.
"update-ca-certificates" command uses /etc/ca-certificates.conf to control which CA certificates are active (trusted) or disabled (distructed or blacklisted) in the Trust Store.
"trust" command can be used to search, view, or export CA certificates from the Trust Store.

Table of Contents

About This Book

Introduction of PKI (Public Key Infrastructure)

Introduction of PKI Certificate

PKI Certificate File Formats

OpenSSL - Cryptography Toolkit

"openssl ca" - CA (Certificate Authority) Tool

Java "keytool" Commands and KeyStore Files

PKI Certificate Store

PKCS12 Certificate Bundle File

PKCS7 Certificate Chain File

Linux Trust Store for CA Certificates

►ca-certificates - Linux CA Certificate Package

update-ca-trust Command on Red Hat Computers

PKI Certificate Related Terminology

References

Full Version in PDF/EPUB