Bug 2337319 - Moving of off /etc/pki/tls/certs/ca-bundle.crt
Summary: Moving of off /etc/pki/tls/certs/ca-bundle.crt
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: python-certifi
Version: rawhide
Hardware: Unspecified
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Miro Hrončok
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 2360110
TreeView+ depends on / blocked
 
Reported: 2025-01-13 11:32 UTC by Frantisek Krenzelok
Modified: 2025-07-08 11:17 UTC (History)
4 users (show)

Fixed In Version: python-certifi-2024.08.30-4.fc43
Clone Of:
Environment:
Last Closed: 2025-07-08 11:17:44 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Fedora Package Sources python-certifi pull-request 17 0 None None None 2025-03-25 14:10:28 UTC

Description Frantisek Krenzelok 2025-01-13 11:32:56 UTC
Hello in anticipation of https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile fedora change proposal, we would like you to consider using the `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem` file in the following place:
https://src.fedoraproject.org/rpms/python-certifi/blob/rawhide/f/certifi-2024.08.30-use-system-cert.patch#_56

as suggested by Lumír Balhar in https://discussion.fedoraproject.org/t/f42-change-proposal-dropping-of-cert-pem-file-system-wide/135119/12

Reproducible: Always

Steps to Reproduce:
-
Actual Results:  
-

Expected Results:  
-

Comment 1 Miro Hrončok 2025-01-13 11:37:01 UTC
We are aware of this (as Lumír mentioned) and are waiting for the change to be approved by FESCo.

Comment 2 Miro Hrončok 2025-01-16 12:10:57 UTC
This is also impacting the bundled certifi in pip:

https://src.fedoraproject.org/rpms/python-pip/blob/rawhide/f/dummy-certifi.patch

Comment 3 Tomas Orsava 2025-01-29 13:31:06 UTC
The change was approved for Fedora 43, waiting for branching.

Comment 4 Aoife Moloney 2025-02-26 13:22:37 UTC
This bug appears to have been reported against 'rawhide' during the Fedora Linux 42 development cycle.
Changing version to 42.

Comment 5 Fedora Update System 2025-07-08 11:13:43 UTC
FEDORA-2025-fb06ed5b66 (python-certifi-2024.08.30-4.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-fb06ed5b66

Comment 6 Fedora Update System 2025-07-08 11:17:44 UTC
FEDORA-2025-fb06ed5b66 (python-certifi-2024.08.30-4.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.