update-ca-trust does not create openssl bundle

[Andrey Repin]

Greetings, ASSI!

> Andrey Repin via Cygwin writes:
>> /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt is missing from my
>> system.
>> The `update-ca-trust extract` doesn't even touch it.
>>
>> What happened?

> Fedora dropped the command that creates the file and removed it from
> distribution here:

> https://src.fedoraproject.org/rpms/ca-certificates/c/7dc60cbc6b0b87462acf6c524bfbd85f1550bec4?branch=rawhide

> You can manually create it like this if it's still needed (I would likel
> to know what for):

> /usr/bin/trust extract --format=openssl-bundle --filter=certificates
> --overwrite --comment /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt

Tried it, and it worked. Thanks!
Made a script to fix the omission.

> …although it looks to me that all certs are available individually in
> /etc/pki/tls/certs so the bundle would be redundant.

Programs that scan the dir do find the certs there, aye.
The rest is working now, too.


-- 
With best regards,
Andrey Repin
Sunday, March 30, 2025 11:22:14

Sorry for my terrible english...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: zp_openssl_bundle-pkg.dash
Type: application/octet-stream
Size: 206 bytes
Desc: not available
URL: <https://cygwin.com/pipermail/cygwin/attachments/20250330/4473bba9/attachment.obj>