Blame SOURCES/README.src

3c42f9
This directory /etc/pki/ca-trust/source/ contains CA certificates and 
3c42f9
trust settings in the PEM file format. The trust settings found here will be
3c42f9
interpreted with a high priority - higher than the ones found in 
3c42f9
/usr/share/pki/ca-trust-source/.
3c42f9
3c42f9
=============================================================================
3c42f9
QUICK HELP: To add a certificate in the simple PEM or DER file formats to the
3c42f9
            list of CAs trusted on the system:
3c42f9
3c42f9
            Copy it to the
3c42f9
                    /etc/pki/ca-trust/source/anchors/
3c42f9
            subdirectory, and run the
3c42f9
                    update-ca-trust
3c42f9
            command.
3c42f9
3c42f9
            If your certificate is in the extended BEGIN TRUSTED file format,
3c42f9
            then place it into the main source/ directory instead.
3c42f9
=============================================================================
3c42f9
3c42f9
Please refer to the update-ca-trust(8) manual page for additional information.