Bug 2380121 - Moving of off /etc/pki/tls/certs/ca-bundle.crt
Summary: Moving of off /etc/pki/tls/certs/ca-bundle.crt
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: gnupg2
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
Assignee: Jakub Jelen
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 2360110
TreeView+ depends on / blocked
 
Reported: 2025-07-15 12:12 UTC by Frantisek Krenzelok
Modified: 2025-07-29 13:26 UTC (History)
8 users (show)

Fixed In Version:
Clone Of: 2379903
Environment:
Last Closed: 2025-07-29 13:26:27 UTC
Type: Bug
Embargoed:
fedora-admin-xmlrpc: mirror+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FC-1815 0 None None None 2025-07-15 12:15:29 UTC

Description Frantisek Krenzelok 2025-07-15 12:12:54 UTC
Hello in anticipation of https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile fedora change proposal, which is taking effect during the fedora rawhide mass rebuild (starting 23th of July), we would like you to validate this and if applicable, add `/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem` to the following list in the source code as other items will not be present on the system.

```
dirmngr/certcache.c:708:    { "/etc/ssl/ca-bundle.pem" },
dirmngr/certcache.c:709:    { "/etc/ssl/certs/ca-certificates.crt" },
dirmngr/certcache.c:710:    { "/etc/pki/tls/cert.pem" },
dirmngr/certcache.c:711:    { "/usr/local/share/certs/ca-root-nss.crt" },
dirmngr/certcache.c:712:    { "/etc/ssl/cert.pem" }

```

Comment 1 Jakub Jelen 2025-07-29 13:26:27 UTC
This was merged and built in rawhide:

https://src.fedoraproject.org/rpms/gnupg2/pull-request/24


Note You need to log in before you can comment on or make changes to this bug.