24

I'm writing a SOAP client application on Ubuntu using OpenSSL and C++. I am having trouble getting my code to validate the server certificate even though I know has a valid certificate.

Just to make sure I would like to check that it's the case and apparently PEM files are used to list valid certificates.

Can anyone tell me where these files reside on my Ubuntu 12.04 installation? I have the ca-certificates package installed on my machine, so these files must be there somewhere?

Improve this question

3 Answers 3

Reset to default
20

So if you have installed ca-certificates you can easily find out where the files are. Open a terminal and enter

> dpkg -L ca-certificates
/.
/etc
/etc/ssl
/etc/ssl/certs
/etc/ca-certificates
/etc/ca-certificates/update.d
/usr
/usr/sbin
/usr/sbin/update-ca-certificates
/usr/share
/usr/share/ca-certificates
/usr/share/ca-certificates/spi-inc.org
…

So you'll see that all certificates are in /usr/share/ca-certificates. However the default location for certificates is /etc/ssl/certs. You might find additional certificates there.

Improve this answer
12

Try this

sudo find / |grep "\.pem"

This will list all the .pem files present on your system and their full path.

Improve this answer
4
  • 3
    This is not really an answer.
    – guntbert
    May 30, 2014 at 9:59
  • 3
    Not an answer but very useful! Thanks @Mausy5043 for posting this.
    – Monica Heddneck
    Oct 3, 2016 at 19:33
  • sudo is probably unnecessary, since these files needn't be hidden. Also, find can itself test name parameters, so I recommend find / -name "*.pem"
    – sondra.kinsey
    Jun 22, 2017 at 14:27
  • 2
    @sondra.kinsey : finding upwards from / without using sudo will generate a lot of errors for directories that the user has no access to. Using sudo (or redirecting by adding 2> /dev/null keeps the output clean.
    – Mausy5043
    Jun 24, 2017 at 10:51
3

Probably this would help you:

apt-get install apt-file

apt-file update

apt-file list ca-certificates

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .