From Fedora Project Wiki
Description
This test case ensures the proper installation and basic verification of the ca-certificates package which offers a set of CA certificates trusted by the system.
Setup
- Install a fresh version of Fedora.
- Install the
package:
ca-certificatessudo dnf install ca-certificates.
How to test
- Confirm the certificates are properly stored:
ls /etc/pki/ca-trust/extracted/pem/. - Display the contents of a sample certificate to ensure its integrity:
cat /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem. - Use a tool, like
curl, to make a request to a secured website (e.g.,https://www.google.com) to validate the system trusts commonly used certificates:curl https://www.google.com.
Expected Results
- The listed certificates directory should contain various
.pemfiles representing trusted CA certificates. - The displayed certificate content should look valid and not be empty or corrupted.
- The
curlcommand should successfully retrieve the website content without certificate errors.
Optional
For advanced testing:
- Intentionally remove a certificate and test accessing a website using that certificate to ensure it fails.
- Test adding a custom certificate and validate trust.
- Test the update mechanism to ensure new certificates are added, and revoked ones are removed.
