The Mozilla CA root certificate bundle
Go to file
Krenzelok Frantisek 80abd67ad7 Update to CKBI 2.80_v9.0.305 from NSS 3.114
Resolves: RHEL-118486

   Adding:
    # Certificate "TWCA CYBER Root CA"
    # Certificate "TWCA Global Root CA G2"
    # Certificate "SecureSign Root CA12"
    # Certificate "SecureSign Root CA14"
    # Certificate "SecureSign Root CA15"
    # Certificate "D-TRUST BR Root CA 2 2023"
    # Certificate "TrustAsia SMIME ECC Root CA"
    # Certificate "TrustAsia SMIME RSA Root CA"
    # Certificate "TrustAsia TLS ECC Root CA"
    # Certificate "TrustAsia TLS RSA Root CA"
    # Certificate "D-TRUST EV Root CA 2 2023"
    # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
    # Certificate "SwissSign RSA TLS Root CA 2022 - 1"
    # Certificate "Sectigo Public Code Signing Root R46"
    # Certificate "Sectigo Public Code Signing Root E46"
2025-10-10 15:15:06 +02:00
.fmf plans/ci.fmf: add a c9s gating test plan (RHELMISC-9570) 2025-03-11 13:13:42 +01:00
plans Switch to OSCI 2025-06-26 19:31:26 +02:00
tests RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
ca-certificates.spec Update to CKBI 2.80_v9.0.305 from NSS 3.114 2025-10-10 15:15:06 +02:00
ca-legacy RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
ca-legacy.8.txt RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
ca-legacy.conf RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
certdata2pem.py RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
certdata.txt Update to CKBI 2.80_v9.0.305 from NSS 3.114 2025-10-10 15:15:06 +02:00
check_certs.sh RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
ci.fmf Switch to OSCI 2025-06-26 19:31:26 +02:00
fetch.sh RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
gating.yaml Switch to OSCI 2025-06-26 19:31:26 +02:00
nssckbi.h Update to CKBI 2.80_v9.0.305 from NSS 3.114 2025-10-10 15:15:06 +02:00
README.edk2 RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.etc RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.extr RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.java RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.openssl RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.pem RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.src RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
README.usr RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
sort-blocks.py RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
sources RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
trust-fixes RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:35:13 +02:00
update-ca-trust update-ca-trust: return warnings on a unsupported argument 2024-08-19 15:19:23 +02:00
update-ca-trust.8.txt update-ca-trust: Support --output and non-root operation 2024-06-28 17:33:51 +02:00

This directory /usr/share/pki/ca-trust-source/ contains CA certificates and 
trust settings in the PEM file format. The trust settings found here will be
interpreted with a low priority - lower than the ones found in 
/etc/pki/ca-trust/source/ .

=============================================================================
QUICK HELP: To add a certificate in the simple PEM or DER file formats to the
            list of CAs trusted on the system:

            Copy it to the
                    /usr/share/pki/ca-trust-source/anchors/
            subdirectory, and run the
                    update-ca-trust
            command.

            If your certificate is in the extended BEGIN TRUSTED file format,
            then place it into the main source/ directory instead.
=============================================================================

Please refer to the update-ca-trust(8) manual page for additional information.