ericsysmin's DevOps Blog

Often times you may need to have your internal systems have a non-public root certificate installed, from an internal CA. These are a few steps on how to add that root certificate.

Linux (CentOS 6)

1. Install the ca-certificates package from yum.
   
   1	sudo yum install ca-certificates

2. Enable the ability to dynamically update CA Trusts
   
   1	sudo update-ca-trust force-enable

3. Add your certs to /etc/pki/ca-trust/source/anchors/
   
   1	sudo cp *.crt /etc/pki/ca-trust/source/anchors/

4. Update your CA Trusts
   
   1	sudo update-ca-trust extract

 Linux (CentOS 7)

1. Copy your root certificate to /etc/pki/ca-trust/source/anchors/
   
   1	sudo cp *.crt /etc/pki/ca-trust/source/anchors/

2. Update your CA Trusts
   
   1	sudo update-ca-trust extract