Bug 2379903 - Moving of off /etc/pki/tls/certs/ca-bundle.crt
Summary: Moving of off /etc/pki/tls/certs/ca-bundle.crt
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: perl-HTTP-Tiny
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
Assignee: Michal Josef Spacek
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-07-14 12:42 UTC by Frantisek Krenzelok
Modified: 2025-07-21 12:45 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
: 2380121 (view as bug list)
Environment:
Last Closed: 2025-07-16 11:24:44 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github Perl-Toolchain-Gang HTTP-Tiny issues 16 0 None open Fedora 43 change with the certificate bundle 2025-07-14 15:27:54 UTC

Description Frantisek Krenzelok 2025-07-14 12:42:46 UTC
Hello in anticipation of https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile fedora change proposal, which is taking effect during the fedora rawhide mass rebuild (starting 23th of July), we would like you to validate this and if applicable, consider using the file `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem` instead of the `/etc/pki/tls/certs/ca-certificates.crt` certificate bundle which was found in the source-code.

```
./lib/HTTP/Tiny.pm:1672:        "/etc/pki/tls/certs/ca-bundle.crt",       # Fedora/RHEL
```

Comment 1 stig 2025-07-16 11:09:14 UTC
HTTP::Tiny should get the directory-hash path automatically from IO::Socket::SSL::default_ca(), so I don't believe that any changes are needed here:

$ perl -MIO::Socket::SSL -MData::Dumper -E 'say Dumper { IO::Socket::SSL::default_ca() }'
$VAR1 = {
          'SSL_ca_file' => '/etc/pki/tls/cert.pem',
          'SSL_ca_path' => '/etc/pki/tls/certs'
        };

Comment 2 Michal Josef Spacek 2025-07-16 11:24:44 UTC
I am closing the issue for now.  
Feel free to reopen this issue if there are any problems.

Comment 3 Frantisek Krenzelok 2025-07-21 12:45:07 UTC
Thanks Michal for looking into this


Note You need to log in before you can comment on or make changes to this bug.