There is a debconf setting in the ca-certificates package: ca-certificates/trust_new_crts: yes
It is set to yes by default, which means new certificates gets imported without user intervention. In your case, it seems that setting was modified, hence you are getting prompted. You can check your current setting by doing: debconf-show ca-certificates ** Changed in: ca-certificates (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1297800 Title: During upgrades, new certificates will be added. Please choose those you trust. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1297800/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs