The Mozilla CA root certificate bundle
72e5e6e049
Resolves: RHEL-212592 Removing: - XRamp Global CA Root - ePKI Root Certification Authority - certSIGN ROOT CA - Explicitly Distrust DigiNotar Root CA - CommScope Public Trust ECC Root-01 - CommScope Public Trust ECC Root-02 - CommScope Public Trust RSA Root-01 - CommScope Public Trust RSA Root-02 - FIRMAPROFESIONAL CA ROOT-A WEB - SecureSign Root CA12 Adding: - OISTE Client Root ECC G1 - OISTE Client Root RSA G1 - OISTE Server Root ECC G1 - OISTE Server Root RSA G1 - e-Szigno TLS Root CA 2023 - SecureSign Root CA16 - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - SECOM SMIME RSA Root CA 2024 - Telia EC Email Root CA v3 - Telia EC TLS Root CA v3 - Telia RSA Email Root CA v3 - Telia RSA TLS Root CA v3 - certSIGN - Chunghwa Telecom Co., Ltd. - XRamp Global Certification Authority |
||
|---|---|---|
| .fmf | ||
| plans | ||
| tests | ||
| .gitignore | ||
| ca-certificates.spec | ||
| ca-legacy | ||
| ca-legacy.8.txt | ||
| ca-legacy.conf | ||
| certdata2pem.py | ||
| certdata.txt | ||
| check_certs.sh | ||
| ci.fmf | ||
| fetch.sh | ||
| gating.yaml | ||
| nssckbi.h | ||
| README.edk2 | ||
| README.etc | ||
| README.extr | ||
| README.java | ||
| README.openssl | ||
| README.pem | ||
| README.src | ||
| README.usr | ||
| sort-blocks.py | ||
| sources | ||
| trust-fixes | ||
| update-ca-trust | ||
| update-ca-trust.8.txt | ||
This directory /usr/share/pki/ca-trust-source/ contains CA certificates and
trust settings in the PEM file format. The trust settings found here will be
interpreted with a low priority - lower than the ones found in
/etc/pki/ca-trust/source/ .
=============================================================================
QUICK HELP: To add a certificate in the simple PEM or DER file formats to the
list of CAs trusted on the system:
Copy it to the
/usr/share/pki/ca-trust-source/anchors/
subdirectory, and run the
update-ca-trust
command.
If your certificate is in the extended BEGIN TRUSTED file format,
then place it into the main source/ directory instead.
=============================================================================
Please refer to the update-ca-trust(8) manual page for additional information.