Added SUSE/openSUSE support.

README.md

@@ -22,6 +22,7 @@ If you get an error saying _Could not execute because the specified command or f
 - Arch Linux
 - Gentoo
 - Slackware
+- OpenSUSE Leap and SUSE Linux Enterprise Server (SLES).  Tumbleweed and SLED untested but expected to work.
 
 Limitations:
 

src/linux-dev-certs/CertificateManager.cs

@@ -142,6 +142,10 @@ private bool CheckDependencies(HashSet<Dependency> dependencies, bool installMis
             {
                 command = ["slackpkg", "install", ..packagesToInstall];
             }
+            else if (OSFlavor.IsSUSELike)
+            {
+                command = ["zypper", "install", ..packagesToInstall];
+            }
             else
             {
                 command = [];
@@ -180,6 +184,10 @@ private bool CheckDependencies(HashSet<Dependency> dependencies, bool installMis
             {
                 Console.Error.WriteLine($"    slackpkg install {string.Join(", ", packagesToInstall)}");
             }
+            else if (OSFlavor.IsSUSELike)
+            {
+                Console.Error.WriteLine($"    zypper install {string.Join(", ", packagesToInstall)}");
+            }
             else
             {
                 Console.ForegroundColor = color;

src/linux-dev-certs/NssCertificateDatabase.cs

@@ -69,6 +69,10 @@ private string GetPackageForCertUtils()
         {
             return "mozilla-nss";
         }
+        else if(OSFlavor.IsSUSELike)
+        {
+            return "mozilla-nss-tools";
+        }
         else
         {
             OSFlavor.ThrowNotSupported();

src/linux-dev-certs/OSFlavor.cs

@@ -8,6 +8,7 @@ static class OSFlavor
     public static bool IsArchLike => MatchesId("arch");
     public static bool IsGentooLike => MatchesId("gentoo");
     public static bool IsSlackLike => MatchesId("slackware");
+    public static bool IsSUSELike => MatchesId("suse");
 
     private static string? _id;
     private static string[]? _idLike;

src/linux-dev-certs/SystemCertificateStore.cs

@@ -10,6 +10,7 @@ sealed class SystemCertificateStore : ICertificateStore
     private const string DebianFamilyCaSourceDirectory = "/usr/local/share/ca-certificates";
     private const string ArchFamilyCaSourceDirectory = "/etc/ca-certificates/trust-source/anchors/";
     private const string SlackFamilyCaSourceDirectory = "/usr/share/ca-certificates/mozilla/";
+    private const string SUSEFamilyCaSourceDirectory = "/usr/share/pki/trust/anchors/";
     public string Name => "System Certificates";
 
     public bool TryInstallCertificate(string name, X509Certificate2 certificate)
@@ -40,6 +41,17 @@ public bool TryInstallCertificate(string name, X509Certificate2 certificate)
             certFilePath = $"{SlackFamilyCaSourceDirectory}/{name}.crt";
             trustCommand = ["update-ca-certificates"];
         }
+        else if (OSFlavor.IsSUSELike)
+        {
+            certFilePath = $"{SUSEFamilyCaSourceDirectory}/{name}.crt";
+
+            // Absolute since OpenSUSE/SLES do not include /usr/sbin in default PATH even for wheel users
+            trustCommand = ["/usr/sbin/update-ca-certificates"];
+
+            // OpenSUSE and SLES both also provide /usr/bin/trust in the base installation, but
+            // running this would miss any customization in /{etc,usr/lib}/ca-certificates/update.d
+            // trustCommand = ["trust", "extract-compat"];
+        }
         else
         {
             OSFlavor.ThrowNotSupported();
@@ -64,6 +76,10 @@ public void AddDependencies(HashSet<Dependency> dependencies)
         {
             dependencies.Add(new Dependency("update-ca-certificates", "ca-certificates"));
         }
+        else if (OSFlavor.IsSUSELike)
+        {
+            dependencies.Add(new Dependency("/usr/sbin/update-ca-certificates", "ca-certificates"));
+        }
         else if (OSFlavor.IsArchLike)
         {
             dependencies.Add(new Dependency("trust", "p11-kit"));
@@ -75,5 +91,5 @@ public void AddDependencies(HashSet<Dependency> dependencies)
     }
 
     public bool IsSupported
-        => OSFlavor.IsFedoraLike || OSFlavor.IsDebianLike || OSFlavor.IsArchLike || OSFlavor.IsSlackLike;
+        => OSFlavor.IsFedoraLike || OSFlavor.IsDebianLike || OSFlavor.IsArchLike || OSFlavor.IsSlackLike || OSFlavor.IsSUSELike;
 }