Bug 2380436

Summary: Moving of off /etc/pki/tls/certs/ca-bundle.crt
Product: [Fedora] Fedora Reporter: Frantisek Krenzelok <fkrenzel>
Component: NetworkManagerAssignee: Lubomir Rintel <lkundrak>
Status: ON_QA --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: rawhideCC: bgalvani, ffmancera, gnome-sig, ihuguet, lkundrak, mcatanza, mclasen, opensource, rstrode
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: NetworkManager-1.54.0-2.fc43 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2360110    

Description Frantisek Krenzelok 2025-07-16 09:02:54 UTC
Hello in anticipation of https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile fedora change proposal, which is taking effect during the fedora rawhide mass rebuild (starting 23th of July), we would like you to validate this and if applicable, use `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem` instead of the `/etc/ssl/certs/cert.pem` certificate bundle which was found in the source-code

https://src.fedoraproject.org/rpms/NetworkManager/blob/rawhide/f/NetworkManager.spec#_685

Comment 1 Michael Catanzaro 2025-08-18 16:24:16 UTC
Probably shouldn't ignore this.

Comment 2 Frantisek Krenzelok 2025-08-18 16:45:11 UTC
I have tried to patch my self but it seems you need permissions even to fork the repo..

Comment 3 Beniamino Galvani 2025-08-20 08:36:08 UTC
Frantisek, does this look correct?

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2257

The upstream spec file is the reference for Fedora and RHEL. At the next rebase, the package will be aligned to the upstream spec file.

Comment 4 Frantisek Krenzelok 2025-08-20 09:20:03 UTC
Replied in MR