TLS Certificate Validation on Linux
Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.
Practical guide on TLS validation; highly actionable for cloud and platform engineers.
TLS validation on Linux requires chain building from leaf to root in a local trust store, but browsers can fetch missing intermediates while OpenSSL-based tools cannot — a common cause of 'works in Chrome but not curl'. Trust stores originate from Mozilla's root program but are packaged per distribution (Debian: /etc/ssl/certs; Red Hat: /etc/pki/ca-trust), and adding custom CAs requires distro-specific commands like update-ca-certificates or update-ca-trust. Understanding these mechanics is critical for debugging certificate issues in containerized and cloud environments where trust stores may be minimal.
Ivan Tomica