Check if RHEL certs have been updated
I have a sample .pem file placed in /etc/pki/ca-trust/source/anchors
, and I have run update-ca-trust
, but I'm not sure how I can check if the command actually worked. I tried to cat /etc/pki/tls/certs/ca-bundle.crt
for the contents of my sample .pem but no luck.
How can I make sure that my certs have been updated?
To downvoters, could you please give suggestions as to what I can elaborate upon to improve my question?
EDIT
Checking /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
has also not shown anything, so I will assume that my sample cert was not actually added.
Solution 1:
Run this command to see what certs are actually inside the CA bundle on the server.
openssl x509 -text -noout -in /etc/ssl/certs/ca-bundle.crt
You can also use the above command, but substitute the path to your added CA cert, to examine the CA certificate you added.