To install the root certificate into the openssl “certificate store” store it needs to be in pem (as opposed to DER) format
Copy the .pem format certificate into /etc/ssl/certs
in the directory /etc/ssl/certs run the below, where myca.pem is the root CA certificate in pem format.
ln -s myca.pem `openssl x509 -hash -noout -in myca.pem`.0
not that it is a ` not a ‘
any applications that use the openssl “certificate store” should now accept the root cert