> Managing Certificates

The set of digital certificates used by most applications is installed in the directory

/etc/openssl

The name /etc/ssl is also linked here.

The certificates are installed as a single bundle in the cacert.pem file, and expanded as a set of files under /etc/openssl/certs. These variations are to handle the various different ways that applications expect to find certificates.

The actual set of certificates installed is extracted from the Mozilla CA list.

If you need to add your own certificate to the list, updating both the single file bundle and the expanded list, use:

zap manage-cacerts [subcommand ...]

To add a certificate in a given file:

zap manage-cacerts add /path/to/certificate.pem

To list all added certificates:

zap manage-cacerts list

To list all certificates, including the default certificates:

zap manage-cacerts listall

To remove a certificate that has previously been added:

zap manage-cacerts remove certificate-name

The name to remove can be obtained from the list subcommand.

Index | Previous Section | Next Section