So a tool just told me that two of my SSL certificates expired, namely: /etc/ssl/certs/ca-certificates.crt and /etc/ssl/certs/ssl-cert-snakeoil.pem.

What should I do to fix this problem? Remove those certificates? If so how? I'm using Debian 9.1 with KDE.

  • Note that that certificate is created by Debian's ssl-cert package. – artfulrobot Mar 22 at 10:48

There should be a "ca-certificates" package on your distro's package repository.

Upgrade that package and your installed CA certificates will be upgraded.

Btw, if you remove ca-certificates.crt from your system, you won't be able to trust anyone's SSL certificate.

  • It's already the latest version of the official Debian repositories but I still get that warning! – mYnDstrEAm Aug 24 '17 at 23:25
  • Which version of Debian are you using? – Pablo Recalde Aug 25 '17 at 0:52
  • The latest one: 9.1. (No particular distribution but the original Debian from the official website installed from DVD.) – mYnDstrEAm Aug 25 '17 at 11:43
  • Try with command update-ca-certificates – Pablo Recalde Aug 25 '17 at 18:06
  • This doesn't seem to work. The output of sudo update-ca-certificates is: Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done. Updating Mono key store Linux Cert Store Sync - version Synchronize local certs with certs from local Linux trust store. Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed. I already trust 166, your new list has 166 Import process completed. Done done. and I still get that warning. – mYnDstrEAm Aug 28 '17 at 11:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.