21

I'm writing a SOAP client application on Ubuntu using OpenSSL and C++. I am having trouble getting my code to validate the server certificate even though I know has a valid certificate.

Just to make sure I would like to check that it's the case and apparently PEM files are used to list valid certificates.

Can anyone tell me where these files reside on my Ubuntu 12.04 installation? I have the ca-certificates package installed on my machine, so these files must be there somewhere?

17

So if you have installed ca-certificates you can easily find out where the files are. Open a terminal and enter

> dpkg -L ca-certificates
/.
/etc
/etc/ssl
/etc/ssl/certs
/etc/ca-certificates
/etc/ca-certificates/update.d
/usr
/usr/sbin
/usr/sbin/update-ca-certificates
/usr/share
/usr/share/ca-certificates
/usr/share/ca-certificates/spi-inc.org
…

So you'll see that all certificates are in /usr/share/ca-certificates. However the default location for certificates is /etc/ssl/certs. You might find additional certificates there.

| improve this answer | |
11

Try this

sudo find / |grep "\.pem"

This will list all the .pem files present on your system and their full path.

| improve this answer | |
  • 2
    This is not really an answer. – guntbert May 30 '14 at 9:59
  • 1
    Not an answer but very useful! Thanks @Mausy5043 for posting this. – Monica Heddneck Oct 3 '16 at 19:33
  • sudo is probably unnecessary, since these files needn't be hidden. Also, find can itself test name parameters, so I recommend find / -name "*.pem" – sondra.kinsey Jun 22 '17 at 14:27
  • 2
    @sondra.kinsey : finding upwards from / without using sudo will generate a lot of errors for directories that the user has no access to. Using sudo (or redirecting by adding 2> /dev/null keeps the output clean. – Mausy5043 Jun 24 '17 at 10:51
3

Probably this would help you:

apt-get install apt-file

apt-file update

apt-file list ca-certificates

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.