suddenly realizing i don’t know how POSIX systems make sure software knows where the trusted root certificates are
Follow
Debian rips the certs Mozilla uses out and packages them in ca-certificates, which seems to end up installing certs into /etc/ssl/certs. but idk if this is standardized behavior or not
☭
@aescling Gentoo seems to just package Debian's ca-certificates...
$ qfile /etc/ssl/certs/ca-certificates.crt
app-misc/ca-certificates: /etc/ssl/certs/ca-certificates.crt
$ qsearch -H ca-certificates
app-misc/ca-certificates: https://packages.debian.org/sid/ca-certificates
@aescling nothing on linux is standardized in the formal sense it is all just convention
RedHat seems to have a ca-certificates but idk how related it is, if at all