Will the root CA list become outdated if I never restart/upgrade the OS? Or does Ubuntu periodically update the root CA list in the background automatically (without restart/upgrade)?
Asked
Active
Viewed 6,448 times
6
1 Answers
4
Root CA certificates live in the package ca-certificates. It is very rarely updated. Updating this package does not require a reboot. Note that Firefox uses its own certificate store.
AlexP
- 10,197
-
-
1@Lisa unless you setup unattended-upgrades, no packages are upgraded automatically – muru Mar 19 '17 at 09:02
sudo update-ca-certificates -v -f. Chromium/Chrome also uses its own certificates store. Here is a related question. – Pablo Bianchi Dec 03 '19 at 03:17