update-ca-trust Command on Red Hat Computers

PKI Certificate Tutorials - Herong's Tutorial Examples

∟update-ca-trust Command on Red Hat Computers

This chapter provides tutorial notes and example codes on the 'update-ca-trust' command Red Hat computers. Topics include directory structure of the Trust Store; adding or disabling CA certificates.

What Is update-ca-trust Command

/etc/pki/ Directory and Symbolic Links

"update-ca-trust" to Add CA Certificate

"update-ca-trust" to Remove CA Certificate

"update-ca-trust" to Distrust CA Certificate

"update-ca-trust" vs "trust" on Red Hat Computers

Conclusions:

"update-ca-trust" command uses the "/etc/pki/ca-trust/extracted" directory to store certificate files for the Trust Store.
"update-ca-trust" command uses the /etc/pki/ca-trust/source directory to store user provided CA certificates to be imported to the Trust store as trusted or distrusted.
"trust" command can be used to search, view, or export CA certificates from the Trust Store.

Table of Contents

About This Book

Introduction of PKI (Public Key Infrastructure)

Introduction of PKI Certificate

PKI Certificate File Formats

OpenSSL - Cryptography Toolkit

"openssl ca" - CA (Certificate Authority) Tool

Java "keytool" Commands and KeyStore Files

PKI Certificate Store

PKCS12 Certificate Bundle File

PKCS7 Certificate Chain File

Linux Trust Store for CA Certificates

ca-certificates - Linux CA Certificate Package

►update-ca-trust Command on Red Hat Computers

PKI Certificate Related Terminology

References

Full Version in PDF/EPUB