On Tue, Sep 13, 2022 at 06:40:19PM +0200, Sebastian Andrzej Siewior wrote: > On 2022-09-13 18:30:05 [+0200], Kurt Roeckx wrote: > > > > 3) provide a symlink from /usr/lib/ssl/cert.pem to > > > > /etc/ssl/certs/ca-certificates.crt > > > > > > Kurt, I tend to provide this symlink. Any objections? > > > I'm kind of confused that it works for others, like curl. But I don't > > > see anything wrong with what is done in this bug report. > > > > We have a symlink from /usr/lib/ssl/certs to /etc/ssl/certs for ages. > > what I see is: > | openat(AT_FDCWD, "/usr/lib/ssl/openssl.cnf", O_RDONLY) = 3 > | openat(AT_FDCWD, "/usr/lib/ssl/cert.pem", O_RDONLY) = -1 ENOENT (No such > file or directory) > | openat(AT_FDCWD, "/usr/lib/ssl/cert.pem", O_RDONLY) = -1 ENOENT (No such > file or directory) > > This is X509_CERT_FILE / X509_get_default_cert_file(). > > So it would need a symlink from this non existing file to > /etc/ssl/certs/ca-certificates.crt which is provided/ created by > ca-certificates.
That works for me. Kurt