Trust CA certificates

# Debian/Ubuntu/Gentoo
# - 安装
sudo cp root_ca.crt /usr/local/share/ca-certificates/root_ca.crt
# update-ca-certificates 会添加 /etc/ca-certificates.conf 配置文件中指定的证书
#   另外所有 /usr/local/share/ca-certificates/*.crt 会被列为隐式信任
sudo update-ca-certificates

# - 删除
sudo rm /usr/local/share/ca-certificates/root_ca.crt
sudo update-ca-certificates --fresh

# CentOS/Fedora/RHEL
yum install ca-certificates
# 启用动态 CA 配置功能：
update-ca-trust force-enable
cp root_ca.crt /etc/pki/ca-trust/source/anchors/
update-ca-trust

# 安装 root_ca.crt
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/root_ca.crt

# 删除指定的证书
sudo security delete-certificate -c "<name of existing certificate>"