On Linux systems, OpenEdge supports using the OS–provided trust store as the source of trusted CA certificates for TLS connections.

Unlike Windows, Linux does not use a centralized registry-based certificate store. Instead, the OS consolidates trusted CA certificates into a system-wide CA bundle, which is then used by different run-time environments.

System CA trust store locations by distribution

Administrators add certificates to designated directories and the OS consolidates them into a system CA bundle that is used by applications for TLS validation.

OpenEdge reads CA certificates from the following standard locations, depending on the Linux distribution:
Distribution family CA bundle file (used by applications) CA bundle directory
RHEL /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/
SUSE /etc/ssl/ca-bundle.pem /etc/ssl/certs/

OpenEdge supports both the consolidated CA bundle file and a directory of individual certificate files in hashed format. At a startup, it checks that the location is readable and contains valid certificates.

Adding a trusted CA certificate to the system certificate store

To enable OpenEdge components to trust certificates issued by a custom or internal Certificate Authority (CA), you must install the CA certificate into the trust store of the Linux operating system. The process varies slightly depending on the Linux distribution.
Note: You must have root privileges to modify the system certificate store.
  1. Copy the CA certificate to the appropriate trust store directory.
  2. Rebuild the system trust store. For example:
    • RHEL: update-ca-trust
    • SUSE: update-ca-certificates

    This step processes the certificate files and updates the system-wide CA bundle used by applications.

  3. Verify that the CA certificate has been correctly installed and is available for use by the system.

    Verification ensures that the certificate is:

    • Successfully included in the system trust store.
    • Available in the generated CA bundle used by applications.
Note: For detailed steps on how to add a trusted CA certificate to the system certificate store , refer to the documentation of Linux distruibution.