目录“/ etc / ss / certs”包含什么？

Question

我打开目录“/ etc / ss / certs”。 它包含证书列表。 它们用于什么？

Answer 1

实际上，有可能从包系统信息中找到它（尽管它是特定于分发的）。例如，对于ubuntu / debian，您可以执行以下操作：

1. 找出拥有感兴趣的文件/目录的软件包：

   $ dpkg --search /etc/ssl/certs
   ca-certificates, openssl, ssl-cert: /etc/ssl/certs
   

2. 阅读包装说明：

   $apt-cache show ca-certificates
   Package: ca-certificates
   ...
   Description: Common CA certificates
   This package includes PEM files of CA certificates to allow SSL-based
   applications to check for the authenticity of SSL connections.
   .
   It includes, among others, certificate authorities used by the Debian
   infrastructure and those shipped with Mozilla's browsers.
   .
   Please note that certificate authorities whose certificates are
   included in this package are not in any way audited for
   trustworthiness and RFC 3647 compliance, and that full responsibility
   to assess them belongs to the local system administrator.