PKI Certificate Tutorials - Herong's Tutorial Examples - v1.13, by Herong Yang
What Is ca-certificates-mono Package
This section describes the 'ca-certificates-mono' package, which installs trusted root CA certificates in JKS format supporting Java applications.
What Is ca-certificates-mono Package? "ca-certificates-mono" is a software package that contains trusted root CA certificates in PEM format provided by Mozilla Foundation.
"ca-certificates-mono" is usually installed as part of the Mono package on most Linux systems like Debian, Ubuntu, and Red Hat distributions. Root CA certificates stored in pem_lib format installed from "ca-certificates-mono" allow Mono (.NET) applications to verify remote server certificate and establish encrypted connections.
To ensure security, it is highly recommended to keep "ca-certificates-java" updated, as Mozilla Foundation periodically adds and removes CA certificates. You can run package update commands as shown below:
# on Ubuntu herong$ sudo apt install ca-certificates-mono ... ca-certificates-mono is already the newest version ...
After installation, trusted root CA certificates will be stored in the /usr/share/.mono/certs/Trust directory as individual DER files for Mono applications to use.
herong$ ls -l /usr/share/.mono/certs/Trust -rw-r--r-- 1 root root 626 Nov 12 09:48 ski-01B92FEFBF118660F24....cer -rw-r--r-- 1 root root 1374 Nov 12 09:48 ski-035CAB738187A8CCB0A....cer -rw-r--r-- 1 root root 947 Nov 12 09:48 ski-03DE503556D14CBB66F....cer -rw-r--r-- 1 root root 1463 Nov 12 09:48 ski-069A9B1F537DF1F5A4C....cer -rw-r--r-- 1 root root 848 Nov 12 09:48 ski-071FD2E79CDAC26EA24....cer ...
Table of Contents
Introduction of PKI (Public Key Infrastructure)
Introduction of PKI Certificate
OpenSSL - Cryptography Toolkit
"openssl ca" - CA (Certificate Authority) Tool
Java "keytool" Commands and KeyStore Files
PKCS12 Certificate Bundle File
Linux Trust Store for CA Certificates
►ca-certificates - Linux CA Certificate Package
What Is ca-certificates Package
What Is ca-certificates-java Package
►What Is ca-certificates-mono Package
"update-ca-certificates" to Add CA Certificate
"update-ca-certificates" to Disable CA Certificate
"update-ca-certificates" vs "trust" on Debian/Ubuntu Computers
update-ca-trust Command on Red Hat Computers