Differences

This shows you the differences between two versions of the page.

--- technical:fr-ldap [2026/07/24 20:38] – [Install OpenLDAP] system
+++ technical:fr-ldap [2026/07/26 18:39] (current) – [Configure OpenLDAP for ldaps] system
@@ Line 459: / Line 459: @@
 </code>
 </WRAP>
+==== What does update-ca-certificates do? ====
+I like to know how things work. If you also like to know how things work the following insert is for you :-)
+  * The primary master CA file that is updated and can be used on Ubuntu is  **/etc/ssl/certs/ca-certificates.crt**
+  * This command rebuilds the system's trusted certificate store by consolidating certificates from a few key locations:
+    * **System Certificates:** The command reads the configuration file **/etc/ca-certificates.conf** to determine which certificates from **/usr/share/ca-certificates/** should be trusted.
+    * **Local Certificates:** It automatically trusts all .crt files found in /usr/local/share/ca-certificates/. This is the place where we add our internal CA certificate.
+  * **Output:** It then generates the single, concatenated bundle file at **/etc/ssl/certs/ca-certificates.crt**. This file is the master list used by many applications (like OpenSSL) to verify SSL/TLS connections.