Lets assume you have a CA certificate “ca.crt” that you want your system or utilities like curl to trust then you can do the following:
Copy the CA certificate to /etc/pki/ca-trust/source/anchors/
sudo cp ca.crt /etc/pki/ca-trust/source/anchors/
Then you can run the following command to update Fedora’s local CA store.
sudo update-ca-trust
Now you system and tools like curl will trust certificates signed by this CA.
Verify that SSL connection is trusted using curl :
Lets say you have a webserver server whose certificate was signed by the above root CA and the signed certificate is already uploaded to the webserver. You can verify that your Fedora client trusts the certificate using curl.
curl -vvv https://test-server-fqdn.com
In the above curl command, I am passing the verbose flag -vvv which is optional. It is handy for troubleshooting purposes SSL issues.
If the connection is trusted, the SSL connection should work and you would see a message such as below from the curl outputs:
* server certificate verification OKNote: This was tested on Fedora 31.
Source/References:
https://serverfault.com/questions/394815/how-to-update-curl-ca-bundle-on-redhat
https://www.linux.org/docs/man8/update-ca-trust.html
