X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=sbin%2Fupdate-ca-certificates.8;h=9803520ab3e6c0e621591209c1ee749c099744af;hb=f9b0d62e73fc3cd061d8cf1ff054f1c5b1d4a5d7;hp=3c71502548e9c98ca96f4d65bb50ef780ab806b4;hpb=9f46e157955d4ac9d22cc3ff96a3bc4673d2f346;p=ca-certificates.git

diff --git a/sbin/update-ca-certificates.8 b/sbin/update-ca-certificates.8
index 3c71502..9803520 100644
--- a/sbin/update-ca-certificates.8
+++ b/sbin/update-ca-certificates.8
@@ -26,14 +26,18 @@ This manual page documents briefly the
 commands.
 This manual page was written for the Debian distribution.
 .PP
-\fBupdate-ca-certificates\fP is a program that updates /etc/ssl/certs
-directory to hold SSL certificates and generates certificates.crt that is
-single-file version of CA certificates.
+\fBupdate-ca-certificates\fP is a program that updates the directory
+/etc/ssl/certs to hold SSL certificates and generates certificates.crt,
+a concatenated single-file list of certificates.
 .PP
-It reads /etc/ca-certificates.conf file. Each lines list pathname of
-activated CA certificates under /usr/share/ca-certificates.
-Lines that begin with "#" is comment line. 
-Lines that begin with "!" is deselect, deactivation of the CA certificates. 
+It reads the file /etc/ca-certificates.conf. Each line gives a pathname of
+a CA certificate under /usr/share/ca-certificates that should be trusted.
+Lines that begin with "#" are comment lines and thus ignored.
+Lines that begin with "!" are deselected, causing the deactivation of the CA
+certificate in question. 
+.PP
+Furthermore all certificates found below /usr/local/share/ca-certificates
+are also included as implicitly trusted.
 .PP
 Before terminating, \fBupdate-ca-certificates\fP invokes
 \fBrun-parts\fP on /etc/ca-certificates/update.d and calls each hook with
@@ -61,6 +65,9 @@ all CA certificates that you activated in /etc/ca-certificates.conf.
 .TP
 .I /usr/share/ca-certificates
 Directory of CA certificates.
+.TP
+.I /usr/local/share/ca-certificates
+Directory of local CA certificates.
 .SH SEE ALSO
 .BR c_rehash (1),
 .SH AUTHOR