Help adding trusted root and intermediate certs

Hi, Long time Windows user that recently converted to Bazzite. I am having difficulty figuring out how to add my self-host certs. I can add them to the browsers just fine but how can I install the certs to the Bazzite OS? I tried some things GPT suggested and did not work.

I do have Kleopatra installed and created a keypair there that I am using with my KWallet (may be totally not relevant). Also imported the certs inside Kleo but no change, maybe I should reboot.

bobcade.OP•1/27/25, 5:34 PM

Think GPT got me straight as this seems to have worked for everything but one app I am still looking at:

Option 1: Manually Add to the System Trust Store

Locate the Trust Store Directory: You’ll need to find where the OS is storing trusted CA certificates. This is often located in one of these directories:
/etc/ssl/certs/
/usr/share/ca-certificates/

Create a Directory (if it doesn’t exist): If the directory /etc/ssl/certs doesn’t exist or isn’t available, you might need to create it.

sudo mkdir -p /etc/ssl/certs

Copy the Certificates: Copy your root and intermediate certificates (.crt or .pem) into the directory:

sudo cp your-root-ca.crt /etc/ssl/certs/
sudo cp your-intermediate-ca.crt /etc/ssl/certs/

Update the Trust Store: Instead of using update-ca-certificates, you may have to use trust or another tool to update the system-wide trust store. The exact tool depends on what package manager or certificate management system Bazzite uses.

Try using the trust command:

sudo trust anchor /etc/ssl/certs/your-root-ca.crt
sudo trust anchor /etc/ssl/certs/your-intermediate-ca.crt

This command will add the certificates to the trusted store.

Verify the Installation: You can verify that the certificates are added to the store by running:

trust list

You should see your certificates listed if they were successfully added.

bobcade.OP•1/27/25, 5:42 PM

lol I am also new to Discord, how can I mark this solution resolved?

Bbobcade.lol I am also new to Discord, how can I mark this solution resolved?

HikariKnight•1/28/25, 7:32 AM

right click, also you were lucky that GPT even got it somewhat right.
95% of the time it will happily give you information on how to mess up your system

Help adding trusted root and intermediate certs

Similar Threads

Similar Threads

Similar Threads