## Import CA certs

Update CA certs on Collector with GEA CA certificates

## Download certs

Get root and issuing certificates from http://pki.gea.com/cps/default.htm

## Convert .crt to .pem

Transfer crt files to Collector /tmp folder

```shell
# As root
cd /tmp
openssl x509 -inform DER -outform PEM -in GEA_RootRev1.crt -out GEA_RootRev1.crt.pem
openssl x509 -inform DER -outform PEM -in GEA_Issuing03Rev1.crt -out GEA_Issuing03Rev1.crt.pem
```

## Create CA bundle

```shell
# As root
cd /tmp
cat GEA_RootRev1.crt.pem > GEA_ca_bundle.pem
cat GEA_Issuing03Rev1crt.pem >> GEA_ca_bundle.pem
```

## Update system certificates

```shell
# As root
cp /tmp/GEA_ca_bundle.pem  /etc/pki/ca-trust/source/anchors
update-ca-trust
```