Will the root CA list become outdated if I never restart/upgrade the OS? Or does Ubuntu periodically update the root CA list in the background automatically (without restart/upgrade)?
Asked
Active
Viewed 6,221 times
6
-
No, you have to [`sudo update-ca-certificates -v -f`](https://manpages.ubuntu.com/manpages/bionic/man8/update-ca-certificates.8.html). Chromium/Chrome also uses its own certificates store. [Here](https://askubuntu.com/q/1129300/349837) is a related question. – Pablo Bianchi Dec 03 '19 at 03:17
1 Answers
3
Root CA certificates live in the package ca-certificates. It is very rarely updated. Updating this package does not require a reboot. Note that Firefox uses its own certificate store.
AlexP
- 10,037
- 1
- 32
- 39
-
-
1@Lisa unless you setup unattended-upgrades, no packages are upgraded automatically – muru Mar 19 '17 at 09:02