Trust a self-signed certificate on Linux.

Browsers and curl both honor the system bundle once the CA is installed. Copy ca.crt, then update the store.

Firefox

Firefox on Linux may use its own NSS database. Import the CA in Settings → Privacy → Certificates if system trust does not take.

Do not set SSL_CERT_FILE to the host leaf. Do not disable certificate verification in production code to “make localhost work.”

Written for operators who have to trust the box they just stood up. Private keys stay in the tab. Open the generator.