Will the root CA list become outdated if I never restart/upgrade the OS? Or does Ubuntu periodically update the root CA list in the background automatically (without restart/upgrade)?


Root CA certificates live in the package ca-certificates. It is very rarely updated. Updating this package does not require a reboot. Note that Firefox uses its own certificate store.

| improve this answer | |
  • But does it do it automatically? – Lisa Mar 19 '17 at 4:30
  • 1
    @Lisa unless you setup unattended-upgrades, no packages are upgraded automatically – muru Mar 19 '17 at 9:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.