To install a root CA, do
$ sudo apt-get install -y ca-certificates
$ sudo cp local-ca.crt /usr/local/share/ca-certificates
$ sudo update-ca-certificates
/etc/ssl/certs/ca-certificates.crt
- single file (PEM bundle)/etc/ssl/certs
- OpenSSL compatible cert directory