Quiz: TLS

One correct answer

You added the training CA to the trust store on the nginx server — a file in /usr/local/share/ca-certificates and update-ca-certificates. From a colleague's laptop, curl https://app.lab.test/ still says unable to get local issuer certificate. Why?

• A update-ca-certificates takes effect after the server reboots.
• B The site's certificate has expired.
• C Every client has its own trust store, and the CA was added on the server alone.
• D nginx rereads the trust store after a reload, and there was none.