Bug 488537

Summary:	RFE: Method to Import Local CA Certificates
Product:	[Fedora] Fedora	Reporter:	Daniel Qarras <dqarras>
Component:	ca-certificates	Assignee:	Joe Orton <jorton>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	rawhide	CC:	fitzsim, jorton, tmraz
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-05-28 10:21:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Daniel Qarras 2009-03-04 18:43:39 UTC

Description of problem:
In enterprise world different departments set up services and put them behind https using certificates signed with local corporate CA certificates. In Fedora real CA certificates are provided in system level by files

/etc/pki/java/cacerts
/etc/pki/tls/certs/ca-bundle.crt
/etc/pki/nssdb/cert8.db

These are part of RPMs and modifying them is not feasible (e.g., RPM upgrades will wipe locally added CA certs away).

A method to add local CA certs in system level is needed.

Comment 1 Daniel Qarras 2009-03-05 21:31:21 UTC

BTW, this would probably be also very useful with things like IPA which use (by default) a self create CA cert and then issue certificates to clients.

Comment 2 Joe Orton 2009-05-28 10:21:29 UTC


*** This bug has been marked as a duplicate of bug 466626 ***