Does Ubuntu update its root certificate authority list automatically?
5,211
Root CA certificates live in the package ca-certificates
. It is very rarely updated. Updating this package does not require a reboot. Note that Firefox uses its own certificate store.
Related videos on Youtube
Author by
Lisa
Updated on September 18, 2022Comments
-
Lisa over 1 year
Will the root CA list become outdated if I never restart/upgrade the OS? Or does Ubuntu periodically update the root CA list in the background automatically (without restart/upgrade)?
-
Pablo Bianchi over 4 yearsNo, you have to
sudo update-ca-certificates -v -f
. Chromium/Chrome also uses its own certificates store. Here is a related question.
-
-
Lisa about 7 yearsBut does it do it automatically?
-
muru about 7 years@Lisa unless you setup unattended-upgrades, no packages are upgraded automatically