Opensuse

如何在 openSUSE 上安裝系統範圍的 SSL 證書?

  • February 7, 2019

我有一個剛剛從網路伺服器下載的 PEM 證書。我想在系統範圍內安裝它,這樣我就可以捲曲伺服器而不會抱怨缺少證書。

我嘗試將文件放入 /etc/ssl/certs,但什麼也沒發生。

如前所述,SUSE 支持從 openSUSE 13.1 / SLES 12 開始的ca 證書。

與 debian/Ubuntu 的區別在於您的證書的目錄。SLES 手冊頁update-ca-certificates包含以下目錄:

FILES
  /usr/share/pki/trust/anchors
         Directory of CA certificate trust anchors.

  /usr/share/pki/trust/blacklist
         Directory of blacklisted CA certificates

  /etc/pki/trust/anchors
         Directory of CA certificate trust anchors for use by the admin

  /etc/pki/trust/blacklist
         Directory of blacklisted CA certificates for use by the admin

openSUSE 軟體包提到了這些:

- Packages are expected to install their CA certificates in 
 /usr/share/pki/trust/anchors or /usr/share/pki/trust (no extra subdir) instead
 of /usr/share/ca-certificates/<vendor> now. The anchors subdirectory is for
 regular pem files, the directory one above for pem files in
 openssl's 'trusted' format.

引用自:https://unix.stackexchange.com/questions/80131