I have to administrate a bunch of linux machines (server and clients) with different distributions. We want to use docker in the future, so it may be, that there would be more different distris in the future. I have tried to automate adding and removing self-signed ca .pem files and noticed, that sometimes the .pem files reside in /etc/ssl/certs (debian), sometimes it reside in /usr/share/pki/trust or /etc/pki/trust (opensuse) and sometimes those dirs are empty or not existing.
Is there a common way or a command to add/remove ca-certificates on linux to the "official" openssl stack on a machine? If not, how can I find out the right place for ca-certificates or where (in which config-file) is the folder defined for openssl?
I know that this is only half of the route because some applications are using their own private ca-stack (curl?) but it helps a lot to have the self-signed ca-cert in a well known place.