Help adding trusted root and intermediate certs
Hi, Long time Windows user that recently converted to Bazzite. I am having difficulty figuring out how to add my self-host certs. I can add them to the browsers just fine but how can I install the certs to the Bazzite OS? I tried some things GPT suggested and did not work.
I do have Kleopatra installed and created a keypair there that I am using with my KWallet (may be totally not relevant). Also imported the certs inside Kleo but no change, maybe I should reboot.
I do have Kleopatra installed and created a keypair there that I am using with my KWallet (may be totally not relevant). Also imported the certs inside Kleo but no change, maybe I should reboot.
2 Replies
Think GPT got me straight as this seems to have worked for everything but one app I am still looking at:
Option 1: Manually Add to the System Trust Store
Locate the Trust Store Directory: You’ll need to find where the OS is storing trusted CA certificates. This is often located in one of these directories:
/etc/ssl/certs/
/usr/share/ca-certificates/
Create a Directory (if it doesn’t exist): If the directory /etc/ssl/certs doesn’t exist or isn’t available, you might need to create it.
sudo mkdir -p /etc/ssl/certs
Copy the Certificates: Copy your root and intermediate certificates (.crt or .pem) into the directory:
sudo cp your-root-ca.crt /etc/ssl/certs/
sudo cp your-intermediate-ca.crt /etc/ssl/certs/
Update the Trust Store: Instead of using update-ca-certificates, you may have to use trust or another tool to update the system-wide trust store. The exact tool depends on what package manager or certificate management system Bazzite uses.
Try using the trust command:
sudo trust anchor /etc/ssl/certs/your-root-ca.crt
sudo trust anchor /etc/ssl/certs/your-intermediate-ca.crt
This command will add the certificates to the trusted store.
Verify the Installation: You can verify that the certificates are added to the store by running:
trust list
You should see your certificates listed if they were successfully added.
lol I am also new to Discord, how can I mark this solution resolved?
right click, also you were lucky that GPT even got it somewhat right.
95% of the time it will happily give you information on how to mess up your system
