Pull all trusted root and intermediate certificate to single bundle

[yadgayan]

Hi All,

I want to create a single certificate bundle that contains all trusted root and intermediate certificates and also need to update it automatically. Currently, I'm doing it manually (download and update bundle) Is there any easy way to do it? 

[whisperer]

Maybe you can automate using Ansible Tower and quite a bit of Python magic. Otherwise, manual process as far as I know.

[yadgayan]

I can use 2 workers (bash scripts) to update a single CA file based on trusted CA parties that IRD provided. (I never tried but just an idea). I can use the below list to pull the certificates

All intermediate list

https://ccadb.my.salesforce-sites.com/mozilla/PublicAllIntermediateCerts

All Root list

https://curl.se/docs/caextract.html

But I'm seeking any other easy way to do it? 

[whisperer]

Interesting, there is a certificate bundle management:

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ssl-administration-13-1-0...

Check out this excerpt;

"In the Include URLs field, type the URL where remote CA bundles reside, and click Add to include that for generating the new CA bundle.

Only HTTPS URLs are allowed in the Include URLsfields"