| 位置 | /usr/local/share/ca-certificates/、/etc/pki/ca-trust/source/anchors/ |
|---|---|
| 生成物 | /etc/ssl/certs/ca-certificates.crt |
核查
核查
ls -lt --time-style=long-iso /usr/local/share/ca-certificates/ 2>/dev/null
openssl x509 -in /usr/local/share/ca-certificates/corp.crt -noout -subject -issuer -dates 2>/dev/null企业统一部署的代理证书属正常基线，异常判断要看签发主体与部署记录。