From Fedora Project Wiki
Description
This test case ensures the proper installation and basic verification of the ca-certificates
package which offers a set of CA certificates trusted by the system.
Setup
- Install a fresh version of Fedora.
- Install the
ca-certificates
package:sudo dnf install ca-certificates
.
How to test
- Confirm the certificates are properly stored:
ls /etc/pki/ca-trust/extracted/pem/
. - Display the contents of a sample certificate to ensure its integrity:
cat /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
. - Use a tool, like
curl
, to make a request to a secured website (e.g.,https://www.google.com
) to validate the system trusts commonly used certificates:curl https://www.google.com
.
Expected Results
- The listed certificates directory should contain various
.pem
files representing trusted CA certificates. - The displayed certificate content should look valid and not be empty or corrupted.
- The
curl
command should successfully retrieve the website content without certificate errors.
Optional
For advanced testing:
- Intentionally remove a certificate and test accessing a website using that certificate to ensure it fails.
- Test adding a custom certificate and validate trust.
- Test the update mechanism to ensure new certificates are added, and revoked ones are removed.