Skip to content

Instantly share code, notes, and snippets.

@oussemos
Created May 18, 2016 11:14
Show Gist options
  • Star 9 You must be signed in to star a gist
  • Fork 3 You must be signed in to fork a gist
  • Save oussemos/cf81d86a446544bfa9c92f3576306aff to your computer and use it in GitHub Desktop.
Save oussemos/cf81d86a446544bfa9c92f3576306aff to your computer and use it in GitHub Desktop.
398 update-ca-trust force-enable
401 update-ca-trust extract
403 openssl s_client -showcerts -connect github.com:443 </dev/null 2>/dev/null|openssl x509 -outform PEM >mycertfile.pem
405 cp mycertfile.pem /etc/pki/ca-trust/source/anchors/
406 update-ca-trust extract
@nimitbhargava
Copy link

Could you elaborate on what this is for?

@hammondr
Copy link

hammondr commented Jun 6, 2018

I thought update-ca-trust was only used to manage CA certificates, not non-CA certificates like server certificates. When I try something similar (for server certificates), the update-ca-trust extract process ignores them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment