====== CENTOS 7 更新 CACERT 证书 ======


最近在更新 NextCloud 时遇到了一个 SSL 证书错误：

<code>
Could not do request to updater server: SSL certificate problem: certificate has expired
</code>

联想到不久前的 Let’s Encrypt 根证书过期，所以我估计是服务器上的 ca 证书过期了，所以可以使用以下命令更新服务器上的 ca 证书

<code bash>
yum install ca-certificates
update-ca-trust force-enable
update-ca-trust extract
</code>

====== 参考文献 ======


  * https://manuals.gfi.com/en/kerio/connect/content/server-configuration/ssl-certificates/adding-trusted-root-certificates-to-the-server-1605.html
  * https://curl.se/docs/caextract.html