系统添加根证书

How to add CA to system root

Reference

• KERIO
• Overview

If you want to send or receive messages signed by root authorities and these authorities are not installed on the server, you must add a trusted root certificate manually.
Use the following steps to add or remove trusted root certificates to/from a server.

MAC OSX

#ADD
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/new-root-certificate.crt
#DEL
sudo security delete-certificate -c "<name of existing certificate>"

Windows

#ADD
certutil -addstore -f "ROOT" new-root-certificate.crt
#DEL
certutil -delstore "ROOT" serial-number-hex

Debian & Ubuntu

#ADD 
sudo cp foo.crt /usr/local/share/ca-certificates/
sudo cp foo.crt /usr/local/share/ca-certificates/foo.crt
sudo update-ca-certificates
#DEL
sudo rm -f /usr/local/share/ca-certificates/foo.crt
sudo update-ca-certificates --fresh

Centos 6x

#ADD
sudo yum install ca-certificates
sudo update-ca-trust force-enable
sudo cp foo.crt /etc/pki/ca-trust/source/anchors/
update-ca-trust extract

Centos 5x

cat foo.crt >> /etc/pki/tls/certs/ca-bundle.crt