Now we're not trying to be negative here.
We're just pointing out to you that you need to rely on your own skills
and not just the skills and knowledge of the vendors.
But let's move away from this now and just take a look
at PKI and trusted certificates.
When we're browsing the web, our trust relationship isn't to each server.
It's going to be to certificate authorities,
and those certificate authorities are stored within the operating
system or sometimes within the browser itself,
certainly as is the case with Firefox.
We can locate those trusted certificates within the /etc/ssl/certs directory.
So why don't we go through now and take a look at our command line,
add OpenSSL and trusted certificates, and see what's inside of this directory,
/etc/ssl/certs?
And here we are.
We're still on our Ubuntu system, but the location is going to be the same,
whether we're using the Ubuntu system or whether
we're using our AlmaLinux system.
But let's go through and just take a look.
As a standard user, we can go through and approach.
I'm using ls‑l.
So I get a long listing because many of the files that
we'll be looking at will be symbolic links.
And we're looking inside of the /etc/ssl/certs subdirectory.
Now, of course, hitting that big,
glorious Enter key is going to give me my output.
Some files are located directly in this directory,
others in other locations, but we can see then the light blue,
the cyan color, indicating symbolic links.
So we can access it all through the symbolic links from this directory.
Of course, this is provided by our operating system,
and it's inherent to our security.
So we do need to make sure that this is kept up to date.
If we want to see what updates are available,
then we can go through and run sudo and apt list as
our subcommand and ‑‑upgradable.
We're going to see then which packages have updates available,
and we can see anything related to security is going to be focal‑security,
so the operating system code named focal and security.
Now, of course, most of the information quickly scrolled from the screen,
so we up arrow key and run the command again.
And why don't we pipe the output to the good old command list?
And this way, it's much easier to be able to take our time seeing the output.
As we look at it, we can see there that there's an update to libssl.
Now it doesn't show as a security update, but it must be related to security.
As we continue then paging through the rest of the information,
we can see the other updates that are available.
Some are security related, others, again,
may be not security related,
but things like openssl are still related to the security product.
Now it doesn't appear that there are any updates to our certificates available,
but if we did want to upgrade the whole system,
we can run then our sudo apt and upgrade.
So update is to update the metadata.
Upgrade is to upgrade our packages,
and we can then go through and leave this cooking whilst
our complete system is up to date with the latest version of packages that are available.