如何在 openSUSE 上安装系统范围的 SSL 证书？

Question

我有一个刚刚从网络服务器下载的 PEM 证书。我想在系统范围内安装它，这样我就可以卷曲服务器而不会抱怨缺少证书。

我尝试将文件放在 /etc/ssl/certs 中，但没有任何反应。

Answer 1

如前所述，SUSE 支持从 openSUSE 13.1 / SLES 12 开始的ca 证书。

与 debian/Ubuntu 的区别在于证书的目录。SLES 手册页update-ca-certificates包含以下目录：

FILES
   /usr/share/pki/trust/anchors
          Directory of CA certificate trust anchors.

   /usr/share/pki/trust/blacklist
          Directory of blacklisted CA certificates

   /etc/pki/trust/anchors
          Directory of CA certificate trust anchors for use by the admin

   /etc/pki/trust/blacklist
          Directory of blacklisted CA certificates for use by the admin

在openSUSE的包提到这些：

- Packages are expected to install their CA certificates in 
  /usr/share/pki/trust/anchors or /usr/share/pki/trust (no extra subdir) instead
  of /usr/share/ca-certificates/<vendor> now. The anchors subdirectory is for
  regular pem files, the directory one above for pem files in
  openssl's 'trusted' format.