I am checking TLS certificates chain validity against CA sore in this path:
etc/ssl/certs/ca-certificates.crt
I use Ubuntu 18.04 and OpenSSL 1.1.0g. I need to know whether this CAs store is from Ubuntu or OpenSSL?
I am checking TLS certificates chain validity against CA sore in this path:
etc/ssl/certs/ca-certificates.crt
I use Ubuntu 18.04 and OpenSSL 1.1.0g. I need to know whether this CAs store is from Ubuntu or OpenSSL?
OpenSSL has no own CA store although it has a default location where it will look for a CA store. On Debian/Ubuntu this default location is /usr/lib/ssl/certs
which is a link to /etc/ssl/certs
.
The file /etc/ssl/certs/ca-certificates.crt
(note the leading '/' since this is an absolute path) is created from the certificates in /etc/ssl/certs
using the update-ca-certificates program which is part of Ubuntu and Debian and run automatically on installation and when needed on software updates. The certificates which are in /etc/ssl/certs
by default are part of the ca-certificates package.
/etc/ssl/certs/ca-certificates.crt
but since you are showing a relative path the real path this resolves to depends on your current working directory which is unknown. – Steffen Ullrich Dec 19 '18 at 14:41