notes/divers/import_certificate_RHEL9.md

How to Import Your Own CA Root on RHEL 9

Place your CA certificate in the correct directory

cp /mnt/unprotected/tmp/oracle/swgalaxy_root_ca.cert.pem /etc/pki/ca-trust/source/anchors/

Update the system trust store

update-ca-trust extract

Verify that your CA is now trusted

openssl verify -CAfile /etc/pki/tls/certs/ca-bundle.crt /etc/pki/ca-trust/source/anchors/swgalaxy_root_ca.cert.pem