SSL certificate on Linux

linux_ssl_cert.md

SSL Certificate location on Linux For system wide use OpenSSL should provide you /etc/ssl/certs and /etc/ssl/private. The latter of which will be restricted 700 to root:root.

If you have an application not performing an initial privsep from root then it might suit you to locate them somewhere local to the application with the relevantly restricted ownership and permissions.

To install root certificates.

$ cd /usr/ssl/certs
$ curl http://curl.haxx.se/ca/cacert.pem |
  awk '{print > "cert" (1+n) ".pem"} /-----END CERTIFICATE-----/ {n++}'
$ c_rehash

for RHEL based systems

yum -y install ca-certificates

but this too doesn't solve the issue.

I am actually trying to do a git clone and getting this certificate error.

git config --global http.sslVerify false

this actually solves. but not a good idea to have it disabled.