Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a few Redhat 6 servers that are unable to verify the certificate of an HTTPS site. I have checked, and they don't appear to have a very current CA bundle. The file /etc/pki/tls/certs/ca-bundle.crt was last modified in 2010. I checked which package is responsible for updating this file by doing rpm -qf /etc/pki/tls/certs/ca-bundle.crt, and it appears that it is part of ca-certificates package. I tried yum install ca-certificates, and the latest version is already installed. Is there a package available for Redhat 6 that contains a newer CA bundle?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

There isn't. I recommend using http://curl.haxx.se/ca/cacert.pem and making an rpm (easily done with fpm) or distributing it with your configuration management system.

share|improve this answer
    
Thanks! I have done what you recommended, but it just seems odd that this is not better managed by the system updates. –  Curt Mar 14 '13 at 6:19

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.