Arch Linux

olive

Member

From: Belgium

Registered: 2008-06-22

Posts: 1,490

Where are ca-certificates?

To connect to Wifi network, I need the GlobalSign Root CA. I have found the documentation to connect exactly to this network (these are hotspots provided by an ISP) here (for Ubuntu): http://proxy4fun.appspot.com/u?purl=bW9 … nNwdHRo%0A

The problem is a dot not find such files. The file I need (presumably /usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt) is listed in the archlinux page as belonging to the package ca-certificates: https://www.archlinux.org/packages/core … tificates/

But this package is empty ?! Where can I get the list of certificates that should belong to the package ca-certificates? pkgfile doesn't find any.

Last edited by olive (2015-07-23 10:26:43)

Allan

Pacman

From: Brisbane, AU

Registered: 2007-06-09

Posts: 11,508

Website

Re: Where are ca-certificates?

$ pacman -Qi ca-certificates
Name           : ca-certificates
...
Depends On     : ca-certificates-mozilla  ca-certificates-cacert

Check those two packages.

---

PGP Key: F99FFE0FEAE999BD | I develop pacman - buy me a drink!

WorMzy

Administrator

From: Scotland

Registered: 2010-06-16

Posts: 12,610

Website

Re: Where are ca-certificates?

ca-certificates doesn't ship the actual certificates, those are downloaded by the .install scriptlet the package contains.

See https://projects.archlinux.org/svntogit … rtificates

Edit, maybe not.

Last edited by WorMzy (2015-07-23 10:43:02)

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

olive

Member

From: Belgium

Registered: 2008-06-22

Posts: 1,490

Re: Where are ca-certificates?

$ pacman -Qi ca-certificates
Name           : ca-certificates
...
Depends On     : ca-certificates-mozilla  ca-certificates-cacert

Check those two packages.

I had already done that. There are a few files but far fewer than the original list of ca-certificates and not the file I need.

Strike0

Member

From: Germany

Registered: 2011-09-05

Posts: 1,489

Re: Where are ca-certificates?

The certificates are not individual files anymore, but one big list per provider (mozilla, ca-cert). You can simply extract  one certificate you need for your wifi-setup from the list:

$ less /usr/share/ca-certificates/trust-source/mozilla.trust.crt |grep --text -e "Alias: GlobalSign Root"
Alias: GlobalSign Root CA
Alias: GlobalSign Root CA - R2
Alias: GlobalSign Root CA - R3

Raynman

Member

Registered: 2011-10-22

Posts: 1,539

Re: Where are ca-certificates?

Individual files are also produced by update-ca-trust (run by the install script) and symlinked in /etc/ssl/certs:

$ ls  -1 /etc/ssl/certs/GlobalSign*
/etc/ssl/certs/GlobalSign_ECC_Root_CA_-_R4.pem
/etc/ssl/certs/GlobalSign_ECC_Root_CA_-_R5.pem
/etc/ssl/certs/GlobalSign_Root_CA.pem
/etc/ssl/certs/GlobalSign_Root_CA_-_R2.pem
/etc/ssl/certs/GlobalSign_Root_CA_-_R3.pem