964ecf5394
OBS-URL: https://build.opensuse.org/package/show/Base:System/ca-certificates?expand=0&rev=adaeae7b6f420f8a1b008f624bd1c163
74 lines
2.6 KiB
Groff
74 lines
2.6 KiB
Groff
.\" Hey, EMACS: -*- nroff -*-
|
|
.\" First parameter, NAME, should be all caps
|
|
.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
|
|
.\" other parameters are allowed: see man(7), man(1)
|
|
.TH UPDATE-CA-CERTIFICATES 8 "27 April 2010"
|
|
.\" Please adjust this date whenever revising the manpage.
|
|
.\"
|
|
.\" Some roff macros, for reference:
|
|
.\" .nh disable hyphenation
|
|
.\" .hy enable hyphenation
|
|
.\" .ad l left justify
|
|
.\" .ad b justify to both left and right margins
|
|
.\" .nf disable filling
|
|
.\" .fi enable filling
|
|
.\" .br insert line break
|
|
.\" .sp <n> insert n+1 empty lines
|
|
.\" for manpage-specific macros, see man(7)
|
|
.SH NAME
|
|
update-ca-certificates \- update system CA certificates
|
|
.SH SYNOPSIS
|
|
.B update-ca-certificates
|
|
.RI [ options ]
|
|
.SH DESCRIPTION
|
|
\fBupdate-ca-certificates\fP updates the directory
|
|
/etc/ssl/certs to hold SSL certificates and generates /etc/ssl/ca-bundle.pem,
|
|
a concatenated single-file list of certificates.
|
|
.PP
|
|
It reads the file /etc/ca-certificates.conf. Each line gives a pathname of
|
|
a CA certificate under /usr/share/ca-certificates that should be trusted.
|
|
Lines that begin with "#" are comment lines and thus ignored.
|
|
Lines that begin with "!" are deselected, causing the deactivation
|
|
of the CA certificate in question. All certificates are implicitly
|
|
trusted if no trusted certificates are listed.
|
|
.PP
|
|
Furthermore all certificates found below /usr/local/share/ca-certificates
|
|
are also included as implicitly trusted.
|
|
.PP
|
|
After populating /etc/ssl/certs \fBupdate-ca-certificates\fP invokes
|
|
custom hooks in /usr/lib/ca-certificates/update.d/*.run and
|
|
/etc/ca-certificates/update.d/*.run. The command line options used
|
|
for invoking update-ca-certificates are passed to the hooks as well.
|
|
.SH OPTIONS
|
|
A summary of options is included below.
|
|
.TP
|
|
.B \-h, \-\-help
|
|
Show summary of options.
|
|
.TP
|
|
.B \-v, \-\-verbose
|
|
Be verbose. Output \fBc_rehash\fP.
|
|
.TP
|
|
.B \-f, \-\-fresh
|
|
Fresh updates. Removes symlinks in /etc/ssl/certs directory and
|
|
re-creates them from scratch.
|
|
.SH FILES
|
|
.TP
|
|
.I /etc/ca-certificates.conf
|
|
A configuration file.
|
|
.TP
|
|
.I /etc/ssl/ca-bundle.pem
|
|
A single-file version of all CA certificates. Use of this file is
|
|
deprecated and should only be used as last resort by applications
|
|
that cannot parse the /etc/ssl/certs directory.
|
|
.TP
|
|
.I /usr/share/ca-certificates
|
|
Directory of CA certificates.
|
|
.I /usr/local/share/ca-certificates
|
|
Directory of local CA certificates.
|
|
.SH SEE ALSO
|
|
.BR c_rehash (1),
|
|
.SH AUTHOR
|
|
This manual page was written by Fumitoshi UKAI <ukai@debian.or.jp>,
|
|
for the Debian project and modified by Ludwig Nussel
|
|
<ludwig.nussel@suse.de>.
|