Install ca certificates exported from windows

• Export CA from windows
• Convert CA format from windows to linux
• Copy your CA to dir
• Update ubuntu CA store
• Extra
  • Get ca from server

Sometime we need to sync ca from windows to linux

Export CA from windows

Convert CA format from windows to linux

openssl x509 -inform PEM -in certificate.cer -out certificate.crt

But CER is an X.509 certificate in binary form, DER encoded. CRT is a binary X.509 certificate, encapsulated in text (base-64) encoding.
Because of that, you maybe should use:

openssl x509 -inform DER -in certificate.cer -out certificate.crt

Copy your CA to dir

/usr/local/share/ca-certificates/

Update ubuntu CA store

sudo update-ca-certificates

Extra

Get ca from server

openssl s_client -connect www.google.com:443 2>/dev/null </dev/null |  sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'