On Mon, Oct 18, 2021 at 10:40:59PM +0200, Julien Cristau wrote: > On Mon, Oct 18, 2021 at 02:50:50PM +0200, Benjamin Hof wrote: > > Hi, > > > > I think the following change might be the relevant one: > > > > --- a/update-ca-certificates > > +++ b/update-ca-certificates > > @@ -164,8 +164,6 @@ > > done > > fi > > > > -rm -f "$CERTBUNDLE" > > - > > ADDED_CNT=$(wc -l < "$ADDED") > > REMOVED_CNT=$(wc -l < "$REMOVED") > > > > It triggers this stderr output during openssl rehash (l. 184): > > > > rehash: warning: skipping ca-certificates.crt,it does not contain > > exactly one certificate or CRL > > > Ah, that makes sense. Annoying... > > Kurt/Sebastian, do you think there's a chance openssl rehash could grow > some sort of ignore option so update-ca-certificates could ask it to > skip ca-certificates.crt, to avoid spitting out a warning for it?
As in rehash all files in that directory, excluding a file? I guess that's an option. I guess it's not an option to move the file to a different location. Kurt