Comment # 3 on bug 918944 from Andreas Bockhold

There's no difference:

# cp mycacrt.pem /etc/pki/trust/mycacrt.pem
# cp mycacrt.pem /etc/pki/trust/anchor/mycacrt.pem
# cp mycacrt.pem /etc/pki/trust/mycacrt.crt
# cp mycacrt.pem /etc/pki/trust/anchor/mycacrt.crt

# update-ca-certificates --verbose
running /usr/lib/ca-certificates/update.d/50java.run ...
creating /var/lib/ca-certificates/java-cacerts ...
running /usr/lib/ca-certificates/update.d/70openssl.run ...
creating /var/lib/ca-certificates/openssl ...
running /usr/lib/ca-certificates/update.d/80etc_ssl.run ...
running /usr/lib/ca-certificates/update.d/99certbundle.run ...
creating /var/lib/ca-certificates/ca-bundle.pem ...

When I understand the procedure correctly there should be hashes and symlinks
afterwards in /var/lib/ca-certificates? There are no corresponding ones and
i.e. Firefox does not show my certificate after a restart.

The path /usr/share/ca-certificates/... as indicated by Ludwig does not exist
on my system.


# zypper info ca-certificates
Information for package ca-certificates:
----------------------------------------
Repository: openSUSE-13.2-Oss
Name: ca-certificates
Version: 1_201403302107-8.1.2
Arch: noarch
Vendor: openSUSE
Installed: Yes
Status: up-to-date
Installed Size: 27,3 KiB
Summary: Utilities for system wide CA certificate installation
Description: 
  Utilities for system wide CA certificate installation