rpms/ca-certificates
7
0
Fork 0
Code Issues Pull Requests Releases Activity
The Mozilla CA root certificate bundle
38 Commits 8 Branches 38 Tags 4.2 MiB
Python 74.7%
Shell 13.6%
C 11.7%
c9s
Go to file
Krenželok František 72e5e6e049 Update to CKBI 2.90_v9.0.316 from NSS 3.126 
Resolves: RHEL-212592


Removing:
- XRamp Global CA Root
- ePKI Root Certification Authority
- certSIGN ROOT CA
- Explicitly Distrust DigiNotar Root CA
- CommScope Public Trust ECC Root-01
- CommScope Public Trust ECC Root-02
- CommScope Public Trust RSA Root-01
- CommScope Public Trust RSA Root-02
- FIRMAPROFESIONAL CA ROOT-A WEB
- SecureSign Root CA12

Adding:
- OISTE Client Root ECC G1
- OISTE Client Root RSA G1
- OISTE Server Root ECC G1
- OISTE Server Root RSA G1
- e-Szigno TLS Root CA 2023
- SecureSign Root CA16
- SECOM TLS RSA Root CA 2024
- SECOM TLS ECC Root CA 2024
- SECOM SMIME RSA Root CA 2024
- Telia EC Email Root CA v3
- Telia EC TLS Root CA v3
- Telia RSA Email Root CA v3
- Telia RSA TLS Root CA v3
- certSIGN
- Chunghwa Telecom Co., Ltd.
- XRamp Global Certification Authority
2026-08-11 13:12:09 +02:00
.fmf plans/ci.fmf: add a c9s gating test plan (RHELMISC-9570) 2025-03-11 13:13:42 +01:00
plans Switch to OSCI 2025-06-26 19:31:26 +02:00
tests RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
ca-certificates.spec Update to CKBI 2.90_v9.0.316 from NSS 3.126 2026-08-11 13:12:09 +02:00
ca-legacy RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
ca-legacy.8.txt RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
ca-legacy.conf RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
certdata2pem.py RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
certdata.txt Update to CKBI 2.90_v9.0.316 from NSS 3.126 2026-08-11 13:12:09 +02:00
check_certs.sh RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
ci.fmf Switch to OSCI 2025-06-26 19:31:26 +02:00
fetch.sh RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
gating.yaml Switch to OSCI 2025-06-26 19:31:26 +02:00
nssckbi.h Update to CKBI 2.90_v9.0.316 from NSS 3.126 2026-08-11 13:12:09 +02:00
README.edk2 RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.etc RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.extr RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.java RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.openssl RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.pem RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.src RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.usr RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
sort-blocks.py RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
sources RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
trust-fixes RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
update-ca-trust update-ca-trust: return warnings on a unsupported argument 2024-08-19 15:19:23 +02:00
update-ca-trust.8.txt update-ca-trust: Support --output and non-root operation 2024-06-28 17:33:51 +02:00

README.usr 

This directory /usr/share/pki/ca-trust-source/ contains CA certificates and 
trust settings in the PEM file format. The trust settings found here will be
interpreted with a low priority - lower than the ones found in 
/etc/pki/ca-trust/source/ .

=============================================================================
QUICK HELP: To add a certificate in the simple PEM or DER file formats to the
            list of CAs trusted on the system:

            Copy it to the
                    /usr/share/pki/ca-trust-source/anchors/
            subdirectory, and run the
                    update-ca-trust
            command.

            If your certificate is in the extended BEGIN TRUSTED file format,
            then place it into the main source/ directory instead.
=============================================================================

Please refer to the update-ca-trust(8) manual page for additional information.