{
    "content": [
        {
            "type": "text",
            "text": "# UPDATE-CA-CERTIFICATES (man)\n\n## NAME\n\nupdate-ca-certificates - update /etc/ssl/certs and ca-certificates.crt\n\n## SYNOPSIS\n\nupdate-ca-certificates [options]\n\n## DESCRIPTION\n\nThis manual page documents briefly the update-ca-certificates command.\n\n## TLDR\n\n> Update the CA certificates bundle and regenerate `/etc/ssl/certs`.\n\n- Update certificates:\n  `sudo update-ca-certificates`\n- Update certificates in verbose mode:\n  `sudo update-ca-certificates {{-v|--verbose}}`\n- Perform a fresh update (remove all symlinks and regenerate):\n  `sudo update-ca-certificates {{-f|--fresh}}`\n- Add a custom certificate (copy it first, then update):\n  `sudo cp {{path/to/certificate.crt}} /usr/local/share/ca-certificates/ && sudo update-ca-certificates`\n\n*Source: tldr-pages*\n\n## Sections\n\n- **NAME**\n- **SYNOPSIS**\n- **DESCRIPTION**\n- **OPTIONS** (3 subsections)\n- **FILES**\n- **SEE ALSO**\n- **AUTHOR**\n\nUse structuredContent.sections for detailed options, examples, and full documentation.\n"
        }
    ],
    "structuredContent": {
        "command": "UPDATE-CA-CERTIFICATES",
        "section": "",
        "mode": "man",
        "summary": "update-ca-certificates - update /etc/ssl/certs and ca-certificates.crt",
        "synopsis": "update-ca-certificates [options]",
        "tldr_summary": "Update the CA certificates bundle and regenerate `/etc/ssl/certs`.",
        "tldr_examples": [
            {
                "description": "Update certificates",
                "command": "sudo update-ca-certificates"
            },
            {
                "description": "Update certificates in verbose mode",
                "command": "sudo update-ca-certificates {{-v|--verbose}}"
            },
            {
                "description": "Perform a fresh update (remove all symlinks and regenerate)",
                "command": "sudo update-ca-certificates {{-f|--fresh}}"
            },
            {
                "description": "Add a custom certificate (copy it first, then update)",
                "command": "sudo cp {{path/to/certificate.crt}} /usr/local/share/ca-certificates/ && sudo update-ca-certificates"
            }
        ],
        "tldr_source": "official",
        "flags": [
            {
                "flag": "-h",
                "long": "--help",
                "arg": null,
                "description": "Show summary of options."
            },
            {
                "flag": "-v",
                "long": "--verbose",
                "arg": null,
                "description": "Be verbose. Output openssl rehash."
            },
            {
                "flag": "-f",
                "long": "--fresh",
                "arg": null,
                "description": "Fresh updates. Remove symlinks in /etc/ssl/certs directory."
            }
        ],
        "examples": [],
        "see_also": [
            {
                "name": "openssl",
                "section": "1",
                "url": "https://www.chedong.com/phpMan.php/man/openssl/1/json"
            }
        ],
        "section_outline": [
            {
                "name": "NAME",
                "lines": 2,
                "subsections": []
            },
            {
                "name": "SYNOPSIS",
                "lines": 2,
                "subsections": []
            },
            {
                "name": "DESCRIPTION",
                "lines": 19,
                "subsections": []
            },
            {
                "name": "OPTIONS",
                "lines": 2,
                "subsections": [
                    {
                        "name": "-h, --help",
                        "lines": 2,
                        "flag": "-h",
                        "long": "--help"
                    },
                    {
                        "name": "-v, --verbose",
                        "lines": 2,
                        "flag": "-v",
                        "long": "--verbose"
                    },
                    {
                        "name": "-f, --fresh",
                        "lines": 2,
                        "flag": "-f",
                        "long": "--fresh"
                    }
                ]
            },
            {
                "name": "FILES",
                "lines": 13,
                "subsections": []
            },
            {
                "name": "SEE ALSO",
                "lines": 2,
                "subsections": []
            },
            {
                "name": "AUTHOR",
                "lines": 6,
                "subsections": []
            }
        ],
        "sections": {
            "NAME": {
                "content": "update-ca-certificates - update /etc/ssl/certs and ca-certificates.crt\n",
                "subsections": []
            },
            "SYNOPSIS": {
                "content": "update-ca-certificates [options]\n",
                "subsections": []
            },
            "DESCRIPTION": {
                "content": "This manual page documents briefly the update-ca-certificates command.\n\nupdate-ca-certificates  is  a  program  that updates the directory /etc/ssl/certs to hold SSL\ncertificates and generates ca-certificates.crt, a concatenated single-file list  of  certifi‐\ncates.\n\nIt  reads  the file /etc/ca-certificates.conf. Each line gives a pathname of a CA certificate\nunder /usr/share/ca-certificates that should be trusted.  Lines that begin with \"#\" are  com‐\nment lines and thus ignored.  Lines that begin with \"!\" are deselected, causing the deactiva‐\ntion of the CA certificate in question. Certificates must have a .crt extension in  order  to\nbe included by update-ca-certificates.\n\nFurthermore  all  certificates with a .crt extension found below /usr/local/share/ca-certifi‐\ncates are also included as implicitly trusted.\n\nBefore terminating, update-ca-certificates invokes run-parts on /etc/ca-certificates/update.d\nand calls each hook with a list of certificates: those added are prefixed with a +, those re‐\nmoved are prefixed with a -.\n",
                "subsections": []
            },
            "OPTIONS": {
                "content": "A summary of options is included below.\n",
                "subsections": [
                    {
                        "name": "-h, --help",
                        "content": "Show summary of options.\n",
                        "flag": "-h",
                        "long": "--help"
                    },
                    {
                        "name": "-v, --verbose",
                        "content": "Be verbose. Output openssl rehash.\n",
                        "flag": "-v",
                        "long": "--verbose"
                    },
                    {
                        "name": "-f, --fresh",
                        "content": "Fresh updates.  Remove symlinks in /etc/ssl/certs directory.\n",
                        "flag": "-f",
                        "long": "--fresh"
                    }
                ]
            },
            "FILES": {
                "content": "/etc/ca-certificates.conf\nA configuration file.\n\n/etc/ssl/certs/ca-certificates.crt\nA single-file version of CA certificates.  This holds all CA certificates that you ac‐\ntivated in /etc/ca-certificates.conf.\n\n/usr/share/ca-certificates\nDirectory of CA certificates.\n\n/usr/local/share/ca-certificates\nDirectory of local CA certificates (with .crt extension).\n",
                "subsections": []
            },
            "SEE ALSO": {
                "content": "openssl(1)\n",
                "subsections": []
            },
            "AUTHOR": {
                "content": "This  manual  page  was written by Fumitoshi UKAI <ukai@debian.or.jp>, for the Debian project\n(but may be used by others).\n\n\n\n20 April 2003                  UPDATE-CA-CERTIFICATES(8)",
                "subsections": []
            }
        }
    }
}