Post

Install CA Certificate on Ubuntu 22.04 LTS

Posted Updated
By JJTechTips 1 min read

The CA trust store location

The CA trust store as generated by update-ca-certificates is available at the following locations:

  • As a single file (PEM bundle) in /etc/ssl/certs/ca-certificates.crt
  • As an OpenSSL compatible certificate directory in /etc/ssl/certs

Note: It is important to have the .crt extension on the file, otherwise it will not be processed.

Rename extention from pem to crt

1
2

$ mv myPKIROOTCA-G1.pem myPKIROOTCA-G1.crt
$ mv myPKISUBCA-G1.pem myPKISUBCA-G1.crt

1
2
3

$ sudo apt-get install -y ca-certificates
$ sudo cp local-ca.crt /usr/local/share/ca-certificates
$ sudo update-ca-certificates

To install the certificate into Ubuntu CA trust store run

1

sudo update-ca-certificates

Once completed you will see the following :

1
2
3
4
5
6

Updating certificates in /etc/ssl/certs...
rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
2 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.

The main ca cert store is in

1

$ cd /etc/ssl/certs
HomeLab, Ubuntu
certificate CA PKI
This post is licensed under CC BY 4.0 by the author.