TLS Certificate Validation on Linux
Summary
This article explains TLS certificate validation on Linux, covering how TLS handshakes build certificate chains, what a system trust store contains, and why applications on the same host can disagree about trust. It also discusses cross-runtime fragmentation (OpenSSL, NSS, Java, Node, Python, containers) and practical hardening ideas like pinning and private CAs.