5 kx
5 kx The Package ca-certificates
5 kx ---------------------------
5 kx
5 kx This package includes PEM files of CA certificates to allow SSL-based
5 kx applications to check for the authenticity of SSL connections.
5 kx
5 kx The CA certificates contained in this package are installed into
5 kx /usr/share/ca-certificates/.
5 kx
5 kx The configuration file /etc/ca-certificates.conf is seeded with
5 kx trust information.
5 kx
5 kx 'update-ca-certificates' will then update /etc/ssl/certs/ which may be
5 kx used by various software. It will also generate the hash symlinks and
5 kx generate a single-file version in /etc/ssl/certs/ca-certificates.crt.
5 kx Some web browsers, email clients, and other software that use SSL
5 kx maintain their own CA trust database and may not use the trusted CA
5 kx certificates in this package. Those packages that *do* use
5 kx ca-certificates should depend on this package.
5 kx
5 kx How to install local CA certificates
5 kx ------------------------------------
5 kx
5 kx If you want to install local certificate authorities to be implicitly
5 kx trusted, please put the certificate files as single files ending with
5 kx ".crt" into /usr/local/share/ca-certificates/ and re-run
5 kx 'update-ca-certificates'. If you remove local certificates from
5 kx /usr/local/share/ca-certificates/, you can remove symlinks by running
5 kx 'update-ca-certificates --fresh'. If you want to prepare a local
5 kx package of your certificates, you should depend on ca-certificates,
5 kx install the PEM files into /usr/local/share/ca-certificates/ as above
5 kx and call 'update-ca-certificates' in the package's postinst, and should
5 kx call 'update-ca-certificates --fresh' in the package's postrm.