quick-docs/modules/ROOT/pages/_partials/proc_adding-new-certificates.adoc

[id='proc_adding-new-certificates']
= Adding New Certificates

To add a certificate in the simple PEM or DER file formats to the list of CAs trusted on the system, copy the certificate file to the `/etc/pki/ca-trust/source/anchors/` directory, for example:

[subs="+quotes,macros"]
----
# cp _~/certificate-trust-examples/Cert-trust-test-ca.pem_ _/etc/pki/ca-trust/source/anchors/_
----

To update the system-wide trust store configuration, use the [command]`update-ca-trust` command:

----
# update-ca-trust
----

[NOTE]
====
While the Firefox browser is able to use an added certificate without executing [command]`update-ca-trust`, it is recommended to run [command]`update-ca-trust` after a CA change. Also note that browsers, such as Firefox, Epiphany, or Chromium, cache files, and you might need to clear the browser's cache or restart your browser to load the current system certificates configuration.
====
Fix Shared certificates. 2018-01-21 14:35:53 +00:00			`[id='proc_adding-new-certificates']`
Shared System Certificates added 2017-12-14 10:38:29 +00:00			`= Adding New Certificates`

Removed any mention /usr It was suggested to install new certificates in `/usr` and this contradicts what the FHS 3 suggests. 2022-03-22 17:14:21 +00:00			To add a certificate in the simple PEM or DER file formats to the list of CAs trusted on the system, copy the certificate file to the `/etc/pki/ca-trust/source/anchors/` directory, for example:
Shared System Certificates added 2017-12-14 10:38:29 +00:00
Fix Shared certificates. 2018-01-21 14:35:53 +00:00			`[subs="+quotes,macros"]`
Shared System Certificates added 2017-12-14 10:38:29 +00:00			`----`
Removed any mention /usr It was suggested to install new certificates in `/usr` and this contradicts what the FHS 3 suggests. 2022-03-22 17:14:21 +00:00			`# cp _~/certificate-trust-examples/Cert-trust-test-ca.pem_ _/etc/pki/ca-trust/source/anchors/_`
Shared System Certificates added 2017-12-14 10:38:29 +00:00			`----`

Update proc_adding-new-certificates.adoc 2017-12-21 11:31:33 +00:00			To update the system-wide trust store configuration, use the [command]`update-ca-trust` command:
Shared System Certificates added 2017-12-14 10:38:29 +00:00
			`----`
			`# update-ca-trust`
			`----`

			`[NOTE]`
			`====`
Update proc_adding-new-certificates.adoc 2017-12-21 11:31:33 +00:00			While the Firefox browser is able to use an added certificate without executing [command]`update-ca-trust`, it is recommended to run [command]`update-ca-trust` after a CA change. Also note that browsers, such as Firefox, Epiphany, or Chromium, cache files, and you might need to clear the browser's cache or restart your browser to load the current system certificates configuration.
Shared System Certificates added 2017-12-14 10:38:29 +00:00			`====`