{
    "mode": "man",
    "parameter": "update-ca-certificates",
    "section": "8",
    "url": "https://www.chedong.com/phpMan.php/man/update-ca-certificates/8/json",
    "generated": "2026-06-15T14:27:34Z",
    "synopsis": "update-ca-certificates [options]",
    "sections": {
        "NAME": {
            "content": "update-ca-certificates - update /etc/ssl/certs and ca-certificates.crt\n",
            "subsections": []
        },
        "SYNOPSIS": {
            "content": "update-ca-certificates [options]\n",
            "subsections": []
        },
        "DESCRIPTION": {
            "content": "This manual page documents briefly the update-ca-certificates command.\n\nupdate-ca-certificates  is  a  program  that updates the directory /etc/ssl/certs to hold SSL\ncertificates and generates ca-certificates.crt, a concatenated single-file list  of  certifi‐\ncates.\n\nIt  reads  the file /etc/ca-certificates.conf. Each line gives a pathname of a CA certificate\nunder /usr/share/ca-certificates that should be trusted.  Lines that begin with \"#\" are  com‐\nment lines and thus ignored.  Lines that begin with \"!\" are deselected, causing the deactiva‐\ntion of the CA certificate in question. Certificates must have a .crt extension in  order  to\nbe included by update-ca-certificates.\n\nFurthermore  all  certificates with a .crt extension found below /usr/local/share/ca-certifi‐\ncates are also included as implicitly trusted.\n\nBefore terminating, update-ca-certificates invokes run-parts on /etc/ca-certificates/update.d\nand calls each hook with a list of certificates: those added are prefixed with a +, those re‐\nmoved are prefixed with a -.\n",
            "subsections": []
        },
        "OPTIONS": {
            "content": "A summary of options is included below.\n",
            "subsections": [
                {
                    "name": "-h, --help",
                    "content": "Show summary of options.\n",
                    "flag": "-h",
                    "long": "--help"
                },
                {
                    "name": "-v, --verbose",
                    "content": "Be verbose. Output openssl rehash.\n",
                    "flag": "-v",
                    "long": "--verbose"
                },
                {
                    "name": "-f, --fresh",
                    "content": "Fresh updates.  Remove symlinks in /etc/ssl/certs directory.\n",
                    "flag": "-f",
                    "long": "--fresh"
                }
            ]
        },
        "FILES": {
            "content": "/etc/ca-certificates.conf\nA configuration file.\n\n/etc/ssl/certs/ca-certificates.crt\nA single-file version of CA certificates.  This holds all CA certificates that you ac‐\ntivated in /etc/ca-certificates.conf.\n\n/usr/share/ca-certificates\nDirectory of CA certificates.\n\n/usr/local/share/ca-certificates\nDirectory of local CA certificates (with .crt extension).\n",
            "subsections": []
        },
        "SEE ALSO": {
            "content": "openssl(1)\n",
            "subsections": []
        },
        "AUTHOR": {
            "content": "This  manual  page  was written by Fumitoshi UKAI <ukai@debian.or.jp>, for the Debian project\n(but may be used by others).\n\n\n\n20 April 2003                  UPDATE-CA-CERTIFICATES(8)",
            "subsections": []
        }
    },
    "summary": "update-ca-certificates - update /etc/ssl/certs and ca-certificates.crt",
    "flags": [
        {
            "flag": "-h",
            "long": "--help",
            "arg": null,
            "description": "Show summary of options."
        },
        {
            "flag": "-v",
            "long": "--verbose",
            "arg": null,
            "description": "Be verbose. Output openssl rehash."
        },
        {
            "flag": "-f",
            "long": "--fresh",
            "arg": null,
            "description": "Fresh updates. Remove symlinks in /etc/ssl/certs directory."
        }
    ],
    "examples": [],
    "see_also": [
        {
            "name": "openssl",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/openssl/1/json"
        }
    ]
}