Browsers are a good example which just reject anything because they see that the CA they see isn't in their list of trusted roots (and also the endpoint cert they see isn't matching the host name of the site you visit). Thus the 'corporate' CA needs to be injected into the browser (and OS, and package manager, and ...) trust store or nothing works
9
u/Meins447 8d ago
Jup :-)
Browsers are a good example which just reject anything because they see that the CA they see isn't in their list of trusted roots (and also the endpoint cert they see isn't matching the host name of the site you visit). Thus the 'corporate' CA needs to be injected into the browser (and OS, and package manager, and ...) trust store or nothing works