[arch-general] update-ca-trust. how to create Equifax_Secure_CA.pem and thawte_Primary_Root_CA.pem bundle

niya levi niyalevi at gmail.com
Sat Feb 6 11:57:01 UTC 2016


how do i create a ca certificate bundle with update-ca-trust extract or
trust extract-compat
which includes my root and intermediate certificates plus
Equifax_Secure_CA.pem and thawte_Primary_Root_CA.pem,
i need this for postfix to relay through gmail,
on a previous instalation of postfix i simply used :-
cat myCA.crt /etc/ssl/certs/Equifax_Secure_CA.pem
/etc/ssl/certs/thawte_Primary_Root_CA.pem | tee /etc/postfix/ca.crt
with the new dynamic configuration feature method of adding CA
certificates i use :-
cp myCA.crt /etc/ca-certificates/trust-source/anchors
update-ca-trust extract

my root and intermediate ca certificates are created in /etc/ssl/certs
and /etc/ssl/cert.pem has the root and intermediate ca certificate bundle

so how do i add the other two ca certificates to the /etc/ssl/cert.pem
bundle ?

thanx shadrock

More information about the arch-general mailing list