tails/config/chroot_local-hooks/58-create-tails-website-CA-bundle

#!/bin/sh

set -e

echo "Creating CA bundle for authenticating https://tails.boum.org/"

BUNDLE=/usr/local/etc/ssl/certs/tails.boum.org-CA.pem

cat /etc/ssl/certs/AddTrust_External_Root.pem \
    /etc/ssl/certs/Lets-Encrypt-Authority-X3.pem \
   > "$BUNDLE"

chmod a+r "$BUNDLE"