Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

I have a CA certificate that I use to connect to a WPA2 Enterprise wireless network.

Where within my home folder should I store the .crt file? I don't see anything in the Filesystem Hierarchy Standard that suggests what I should do.

share|improve this question

2 Answers 2

According to the this documantation, you can store certificate under /etc/ssl/cert directory. Also you have to store .key file under /etc/ssl/newcerts

share|improve this answer
This is a reasonable answer to the question as it was originally asked (and may still serve to help others with a similar problem who either have administrative privileges, or are able to enlist the assistance of a user on their system who does). –  Eliah Kagan Mar 19 '13 at 15:10
The question originally asked about storing a certificate in the home folder. A helpful answer doesn't necessarily have to suggest a location within the home folder (maybe there isn't an appropriate one), but if it doesn't, it should still address the issue and explain why another location is preferable. The original question also asked about a certificate that's used by a single user. This answer ignores that limited scope and instead suggests installing the certificate for all users. I also expect an explanation of the rational behind that decision. –  ændrük May 6 '13 at 17:13
Since I answered this question for about 1 year ago, I didn't remember what was my rational. But looking to the question and my answer, it is clear that my answer is wrong. I apologize for any inconvenience I caused. –  numand Jul 26 at 14:50

Note: The question was edited a while after I answered, adding the point about the 'non-administrative' user, etc, but this answer is one alternative way of doing it.

There is no specific location in the users's home folder that is officially designated for .crt files, and none appears to be mentioned in the LSB (Linux Standard Base) or the FHS (Filesystem Hierachy Standard) if the specifications are examined at the Linux Foundation.

However, system-wide there is an official location specified by Debian, and adhered to by Ubuntu, which is explained in the packages documentation for ca-certificates. If you open the file /usr/share/doc/ca-certificates/README.Debian, this notice is presented:

If you want to install local certificate authorities to be implicitly trusted, please put the certificate files as single files ending with “.crt“ into “/usr/local/share/ca-certificates” and re-run “update-ca-certificates”

i.e. this means that the certificate must end with .crt, and that in order to install your certificate and update the database you have to run:

sudo cp /home/mike/ra.crt /usr/local/share/ca-certificates
sudo update-ca-certificates

This is the only official line that I know of, and more information is available at man update-ca-certificates and in the Ubuntu manpages online.

share|improve this answer
I'm sorry, it wasn't my intention to change the meaning of the question after you answered it. The question as you see it now is the same as my interpretation of its earlier wording. I understand now that specifying "a single user" and "within my home folder" doesn't necessarily imply "non-administrative" for many readers in this community. –  ændrük May 6 '13 at 17:23

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.