What are these weird hash symlinks to certificates in /etc/ssl/certs?
Trusted CA certificates are commonly stored in /etc/ssl/certs. Looking at the directory on my ubuntu server there's a bunch of certificate files and symlinks to certs in other directories as expected, but there are also these weird looking symlinks to the previously mentioned entities:
68dd7389.0 -> Hongkong_Post_Root_CA_3.pem
The link name looks like a hash of some kind, perhaps of the certificate file itself? As far as I can tell there's one for each "real" certificate in the directory.
What are these hashy certificate links? What creates them, and what are they used for?
1 answer
They are created by openssl-rehash tool. Probably your distro runs this somewhere behind the scenes so you don't have to.
Quote from the docs above:
This command is useful as many programs that use OpenSSL require directories to be set up like this in order to find certificates.

1 comment thread