Basically I am trying to use TLS to encrypt traffic for services on my own LAN. I created a "certificate authority" so that the TLS certificates don't look to be self-signed. But I still need to add the certificate to my operating system's list of known authorities.
It looks like I just copy the cert.pem to /usr/share/ca-certificates/
and then just add a symbolic link in /etc/ssl/certs pointing to it.
I just wasn't sure if that is correct or not.