2

There are different methods of storing a certificate file? DER, PEM, PKCS: PKCS7 & PKCS12?

Are all of these formats accept as valid in /usr/local/share/ca-certificates?

2

Certificates are added to the CA certificate database using the update-ca-certificates command. This is a shell script that scans the source certificate directories and adds any certificates found to the certificate bundle (/etc/ssl/certs/ca-certificates.crt) as well as creating a symlink in /etc/ssl/certs to the certificate.

The ca-certificates.crt file is a concatenation of certificates, each in PEM format.

The script doesn't convert any certificate formats, therefore it assumes that all certificates in the source folders are in PEM format with a .crt file extension.

0

There are different methods of storing a certificate file? DER, PEM, PKCS: PKCS7 & PKCS12?

Yes, these are.

And,

Are all of these formats accept as valid in /usr/local/share/ca-certificates?

From man update-ca-certificates FILES section:

   /usr/local/share/ca-certificates
          Directory of local CA certificates (with .crt extension).

I think the answer is no, only PEM .crt format may be accepted as valid in there, use it to be sure.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.