Enabling SSL SERIES 2/4: Trusted CA store
This series of videos walks through SSL Certificate Management with Posit products. • Creating an SSL Cert: In this video, we walk through the process of creating an SSL certificate. • Trusted CA Store: In this video, we discuss the trusted certificate store on your Linux server. • SSL Certs Chain Full vs Partial: In this video, we walk through the process of ensuring that your SSL certificate chain is complete. • SSL Cert File Permissions: In this video, we walk through the process of verifying the correct file permissions on your SSL certificate
image: thumbnail.jpg
Transcript#
This transcript was generated automatically and may contain errors.
Hey everyone, my name is Cecil from the Posit Support team and I'm here with Jay, who's a colleague also on the Posit Support team, and we're going to walk through the Trusted Certificate Store on your server.
So the Trusted Certificate Store is a list of all the pre-trusted SSL certificates that are trusted by your Linux distribution, and having your SSL certificate chain within this store is important so that you don't run into any SSL trust issues.
So the Trusted Certificate Store is a list of all the pre-trusted SSL certificates that are trusted by your Linux distribution, and having your SSL certificate chain within this store is important so that you don't run into any SSL trust issues.
So in our case, we're using Ubuntu 24. If you're using Red Hat or any other Linux Ubuntu distribution that isn't Ubuntu 24, the directories may be slightly different. It's all mentioned in our support article, but for today's demo with Ubuntu 24, this is in the user local share directory.
Adding the certificate to the trusted store
So what we want to do is copy our SSL certificate only to the user local share directory. You can paste that there.
Once copied across, we can run the update CA certificates command. So depending on if you already have your SSL certificate in the Trusted Store or not, in our case, we've already had this added, so you'll see zero added, but if you're adding your certificate for the first time to the Trusted Store, then you'll see one added, potentially more, depending on how your SSL certificates are managed. Now that we've done that, that should resolve any of the SSL trust issues that we see.