How to Add  trusted root certificates to the server

 

You must manually add a trusted root certificate if you want to send or receive messages that are signed by root authorities but these authorities are not installed on the server.

To add or remove trusted root certificates from/from a server, use the subsequent steps.

Linux (Ubuntu, Debian)

Function	Method
Add	Copy your CA to dir /usr/local/share/ca-certificates/ Use command: sudo cp foo.crt /usr/local/share/ca-certificates/foo.crt Update the CA store: sudo update-ca-certificates
Remove	Remove your CA. Update the CA store: sudo update-ca-certificates --fresh

Linux (CentOs 6/7/Amazon Linux 2)

Function	Method
Add	Install the ca-certificates package: yum install ca-certificates Enable the dynamic CA configuration feature: update-ca-trust force-enable Add it as a new file to /etc/pki/ca-trust/source/anchors/: cp foo.crt /etc/pki/ca-trust/source/anchors/ Use command: update-ca-trust extract