Hi!

I thought adding a certificate to the list of certificates visible in System Settings/SSL Preferences would add it to system trusted certificates. However, after reading `man update-ca-trust` and searching for the certificates I had added with

Code: Select all

awk -v cmd='openssl x509 -noout -subject' ' /BEGIN/{close(cmd)};{print | cmd}' < /etc/ssl/certs/ca-bundle.crt | grep MyOrganization

(command taken from http://unix.stackexchange.com/q/97244/5355) I don't see them.

I tried finding some information on SSL Preferences but page at https://userbase.kde.org/System_Setting ... references is empty.
Pressing F1 in SSL Preferences window opens "The System Settings Handbook" (Settings/System Settings in the Contents pane) where there's the list of "System Settings Categories and Modules" with absolutely no information on what SSL Preferences are supposed to do. In the Contents pane I found System Settings Modules/SSL Preferences with the following information:

KDE provides a list of all the X.509 certificates used by the system. They can be accessed in the SSL Preferences module in System Settings.
This module provides a categorized listing of all SSL versions and certificates. You can see the details of each of the certificates and add, delete, disable, or enable them.

If the above is true then I guess (according to `man update-ca-trust`) user added certificates should be saved in /usr/share/pki/ca-trust-source or /etc/pki/ca-trust/source and the command `update-ca-trust extract` should be run. It seems that's not the case.

Am I missing something?

Fedora 21 (KDE spin)
KDE 4.14.3

no any problem

mikelewis wrote:no any problem

Sorry but I don't know what you mean.

It's 2020, and I have the same question. Adding a certificate here does not seem to update the system root certificates, so it doesn't not appear to have any application. If it doesn't have any application, the tab should probably be removed.

how about reporting this as a bug? https://bugs.kde.org is where I would report this rather than reviving a 5 year old forum post where apparently nobody new the answer to...