Bug 2377135

Summary: Moving of off /etc/pki/tls/certs/ca-bundle.crt
Product: [Fedora] Fedora Reporter: Frantisek Krenzelok <fkrenzel>
Component: rcloneAssignee: Mikel Olasagasti Uranga <mikel>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: rawhideCC: extras-qa, go-sig, mikel, mspacek, perl-devel
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: 2338983
: 2378955 (view as bug list) Environment:
Last Closed: 2025-07-08 12:21:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2379900    

Description Frantisek Krenzelok 2025-07-08 11:54:42 UTC
Hello in anticipation of https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile fedora change proposal, which is taking effect during the fedora rawhide mass rebuild (starting 13th of July), we would like you to consider using the `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem` instead of the `/etc/pki/tls/cacert.pem` certificate bundle which was found in the source-code.

Comment 1 Mikel Olasagasti Uranga 2025-07-08 12:12:39 UTC
Has this been detected by checking source code or by other means?

The only references I find are related to documentation and are explained in the FAQ:

$ git grep cacert.pem 
MANUAL.html:&quot;/etc/pki/tls/cacert.pem&quot;,            // OpenELEC</code></pre>
MANUAL.md:    "/etc/pki/tls/cacert.pem",            // OpenELEC
MANUAL.txt:    "/etc/pki/tls/cacert.pem",            // OpenELEC
docs/content/faq.md:    "/etc/pki/tls/cacert.pem",            // OpenELEC
rclone.1:\[dq]/etc/pki/tls/cacert.pem\[dq],            // OpenELEC

FAQ: https://rclone.org/faq/#rclone-gives-x509-failed-to-load-system-roots-and-no-roots-provided-error

Can you confirm if the detection was done this way and that it's safe to close the BZ?

Comment 2 Frantisek Krenzelok 2025-07-08 12:21:16 UTC
Sorry this was a false report, the file is not present, closing the ticket.