Blame SOURCES/README.usr

13173e
This directory /usr/share/pki/ca-trust-source/ contains CA certificates and 
13173e
trust settings in the PEM file format. The trust settings found here will be
13173e
interpreted with a low priority - lower than the ones found in 
13173e
/etc/pki/ca-trust/source/ .
13173e
13173e
=============================================================================
13173e
QUICK HELP: To add a certificate in the simple PEM or DER file formats to the
13173e
            list of CAs trusted on the system:
13173e
13173e
            Copy it to the
13173e
                    /usr/share/pki/ca-trust-source/anchors/
13173e
            subdirectory, and run the
13173e
                    update-ca-trust
13173e
            command.
13173e
13173e
            If your certificate is in the extended BEGIN TRUSTED file format,
13173e
            then place it into the main source/ directory instead.
13173e
=============================================================================
13173e
13173e
Please refer to the update-ca-trust(8) manual page for additional information.