Edit

Certificate management in Azure Linux

This article explains how Azure Linux handles trusted root certificates and how to add custom certificates to regular Azure Linux images and distroless container images.

Azure Linux 4.0 uses Fedora's ca-certificates package. Fedora maintains and distributes the package, and the certificate bundle is sourced from Mozilla's set of trusted CAs.

Note

Azure Linux 4.0 is now in preview and is strictly limited to evaluation and testing purposes. It's not suitable for production use.

Certificate storage and management

Azure Linux stores and manages certificates by using the shared trust store approach described in Fedora's Shared System Certificates.

Available certificate bundles

In Azure Linux 4.0 regular images, ca-certificates is preinstalled and provides the standard certificate bundle. This package comes from Fedora and distributes the Mozilla-managed certificate set.

For more information, see Fedora ca-certificates package.

Install a certificate

To install a certificate in a regular image, follow the process described in Fedora's Shared System Certificates.

To learn more about Azure Linux, see the following resources: