Please refer to the following page to find instructions on how to install and keep updated a local installation of IGTF CA certificates:
https://docs.egi.eu/providers/operations-manuals/howto01_using_igtf_ca_distribution/
Generic Linux installation
In case you want to automatize the installation of IGTF CA certificates on a generic Linux installation, you can follow these steps. The assumption is that you have root privileges on the target machine and curl is installed.
IGTF_CA_CERT_PATH=/etc/grid-security/certificates/
IGTF_CA_CERT_BASE_URL=https://repository.egi.eu/sw/production/cas/1/current/tgz/
mkdir -p ${IGTF_CA_CERT_PATH}
FILELIST="$(curl -s ${IGTF_CA_CERT_BASE_URL} | sed -n 's/^.*href="\(.*\.tar\.gz\)">.*$/\1/p')"
for file in ${FILELIST}; do
curl ${IGTF_CA_CERT_BASE_URL}/$file | tar xz --strip-components=1 -C "${IGTF_CA_CERT_PATH}"
done