1 .\" Hey, EMACS: -*- nroff -*-
2 .\" First parameter, NAME, should be all caps
3 .\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
4 .\" other parameters are allowed: see man(7), man(1)
5 .TH UPDATE-CA-CERTIFICATES 8 "20 April 2003"
6 .\" Please adjust this date whenever revising the manpage.
8 .\" Some roff macros, for reference:
9 .\" .nh disable hyphenation
10 .\" .hy enable hyphenation
11 .\" .ad l left justify
12 .\" .ad b justify to both left and right margins
13 .\" .nf disable filling
14 .\" .fi enable filling
15 .\" .br insert line break
16 .\" .sp <n> insert n+1 empty lines
17 .\" for manpage-specific macros, see man(7)
19 update-ca-certificates \- update /etc/ssl/certs and certificates.crt
21 .B update-ca-certificates
24 This manual page documents briefly the
25 .B update-ca-certificates
27 This manual page was written for the Debian distribution.
29 \fBupdate-ca-certificates\fP is a program that updates the directory
30 /etc/ssl/certs to hold SSL certificates and generates certificates.crt,
31 a concatenated single-file list of certificates.
33 It reads the file /etc/ca-certificates.conf. Each line gives a pathname of
34 a CA certificate under /usr/share/ca-certificates that should be trusted.
35 Lines that begin with "#" are comment lines and thus ignored.
36 Lines that begin with "!" are deselected, causing the deactivation of the CA
37 certificate in question.
39 Furthermore all certificates found below /usr/local/share/ca-certificates
40 are also included as implicitly trusted.
42 Before terminating, \fBupdate-ca-certificates\fP invokes
43 \fBrun-parts\fP on /etc/ca-certificates/update.d and calls each hook with
44 a list of certificates: those added are prefixed with a +, those removed are
47 A summary of options is included below.
50 Show summary of options.
53 Be verbose. Output \fBc_rehash\fP.
56 Fresh updates. Remove symlinks in /etc/ssl/certs directory.
59 .I /etc/ca-certificates.conf
62 .I /etc/ssl/certs/ca-certificates.crt
63 A single-file version of CA certificates. This hold
64 all CA certificates that you activated in /etc/ca-certificates.conf.
66 .I /usr/share/ca-certificates
67 Directory of CA certificates.
68 .I /usr/local/share/ca-certificates
69 Directory of local CA certificates.
73 This manual page was written by Fumitoshi UKAI <ukai@debian.or.jp>,
74 for the Debian project (but may be used by others).