On SUSE ¶

• Copy the CA certificate (My-CA.pem) or (My-CA.crt) to /etc/pki/trust/anchors/
• Now run:

1sudo update-ca-certificates

Refer to documentation here and here. See also Blog post.

On Fedora ¶

• Copy the CA certificate (My-CA.pem) to /etc/pki/ca-trust/source/anchors/ or /usr/share/pki/ca-trust-source/anchors/
• Now run:

1sudo update-ca-trust

Refer to documentation here. See also Blog post.

On Debian & Derivatives ¶

• Copy the CA certificate (My-CA.pem) or (My-CA.pem) into /usr/local/share/ca-certificates/.
• Update the Cert Store with:

1sudo update-ca-certificates

Refer to documentation here and here.

On Arch ¶

System-wide – Arch(p11-kit)
(From arch wiki)

• Run (as root)

1trust anchor --store My-CA.crt

• The certificate will be written to /etc/ca-certificates/trust-source/My-CA.p11-kit and the “legacy” directories automatically updated.
• If you get “no configured writable location” or a similar error, import the CA manually:
• Copy the certificate to the /etc/ca-certificates/trust-source/anchors/ directory.
• and then

1sudo update-ca-trust

wiki page here

---

See also:

• Hochschule Schmalkalden
• MatrixPost