What Is ca-certificates-mono Package

This section describes the 'ca-certificates-mono' package, which installs trusted root CA certificates in JKS format supporting Java applications.

What Is ca-certificates-mono Package? "ca-certificates-mono" is a software package that contains trusted root CA certificates in PEM format provided by Mozilla Foundation.

"ca-certificates-mono" is usually installed as part of the Mono package on most Linux systems like Debian, Ubuntu, and Red Hat distributions. Root CA certificates stored in pem_lib format installed from "ca-certificates-mono" allow Mono (.NET) applications to verify remote server certificate and establish encrypted connections.

To ensure security, it is highly recommended to keep "ca-certificates-java" updated, as Mozilla Foundation periodically adds and removes CA certificates. You can run package update commands as shown below:

# on Ubuntu
herong$ sudo apt install ca-certificates-mono  
...
ca-certificates-mono is already the newest version ...

After installation, trusted root CA certificates will be stored in the /usr/share/.mono/certs/Trust directory as individual DER files for Mono applications to use.

herong$ ls -l /usr/share/.mono/certs/Trust

-rw-r--r-- 1 root root  626 Nov 12 09:48 ski-01B92FEFBF118660F24....cer
-rw-r--r-- 1 root root 1374 Nov 12 09:48 ski-035CAB738187A8CCB0A....cer
-rw-r--r-- 1 root root  947 Nov 12 09:48 ski-03DE503556D14CBB66F....cer
-rw-r--r-- 1 root root 1463 Nov 12 09:48 ski-069A9B1F537DF1F5A4C....cer
-rw-r--r-- 1 root root  848 Nov 12 09:48 ski-071FD2E79CDAC26EA24....cer
...

Table of Contents

 About This Book

 Introduction of PKI (Public Key Infrastructure)

 Introduction of PKI Certificate

 PKI Certificate File Formats

 OpenSSL - Cryptography Toolkit

 "openssl ca" - CA (Certificate Authority) Tool

 Java "keytool" Commands and KeyStore Files

 PKI Certificate Store

 PKCS12 Certificate Bundle File

 PKCS7 Certificate Chain File

 Linux Trust Store for CA Certificates

ca-certificates - Linux CA Certificate Package

 What Is ca-certificates Package

 What Is ca-certificates-java Package

What Is ca-certificates-mono Package

 "update-ca-certificates" to Add CA Certificate

 "update-ca-certificates" to Disable CA Certificate

 "update-ca-certificates" vs "trust" on Debian/Ubuntu Computers

 update-ca-trust Command on Red Hat Computers

 PKI Certificate Related Terminology

 References

 Full Version in PDF/EPUB