I am looking for PKI (Public Key Infrastructure) knowledge and particularly at OS's built-in certificate chain list.

Of course on Windows the company decides which certificate will be built-in, but what about OpenSource operating system like Linux?

  • 2
    That's OS specific. Any particular one you're interested in? Unix is a family of operating systems, Linux is the kernel found in another family of operating systems. Feb 5, 2014 at 9:39
  • What do you mean with CA? Certificate Authority?
    – user55518
    Feb 5, 2014 at 9:47
  • @StephaneChazelas So it is...
    – acgtyrant
    Feb 5, 2014 at 10:02
  • 1
    That's an interesting point, you can assume that Trusted CA on proprietary UNIX are probably decided by the company who developed it. but for free OS like Ubuntu Debian or Centos, I have no clue how this list is established
    – Kiwy
    Feb 5, 2014 at 10:05
  • 4
    It's up to the distribution maintainer. They can include any that they wish. But in practice, mostly the repackage Mozilla's list.
    – bahamat
    Feb 5, 2014 at 10:17

1 Answer 1


I am using Arch Linux, and other users told me that it use the debian package which contains the certificate list compiled by mozilla, spi and cacert.

I am doubt that other Linux distro use the ca-certificate from Debian too.

Not the answer you're looking for? Browse other questions tagged .