update-ca-trust does not create openssl bundle

ASSI Stromeko@nexgo.de
Tue Feb 25 18:32:58 GMT 2025


Andrey Repin via Cygwin writes:
> /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt is missing from my
> system.
> The `update-ca-trust extract` doesn't even touch it.
>
> What happened?

Fedora dropped the command that creates the file and removed it from
distribution here:

https://src.fedoraproject.org/rpms/ca-certificates/c/7dc60cbc6b0b87462acf6c524bfbd85f1550bec4?branch=rawhide

You can manually create it like this if it's still needed (I would likel
to know what for):

/usr/bin/trust extract --format=openssl-bundle --filter=certificates --overwrite --comment /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt

…although it looks to me that all certs are available individually in
/etc/pki/tls/certs so the bundle would be redundant.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Factory and User Sound Singles for Waldorf rackAttack:
http://Synth.Stromeko.net/Downloads.html#WaldorfSounds


More information about the Cygwin mailing list