-
Bug
-
Resolution: Obsolete
-
Major
-
None
-
rhel-10.0, rhel-10.1, rhel-10.1.z, rhel-10.2
-
No
-
Important
-
2
-
rhel-security-crypto-clubs
-
0
-
False
-
False
-
-
None
-
Crypto25September, Crypto25October
-
Unspecified
-
Unspecified
-
Unspecified
-
None
The implementation of Changes/droppingOfCertPemFile was only partially executed: the bundle `/etc/pki/tls/certs/ca-bundle.crt` was unfortunately left behind.
This has resulted in two issues:
- Package Failures: Packages that still had a dependency on some bundle files that were removed are now broken.
- Blocked Fix: The remaining legacy file ca-bundle.crt cannot be removed now due to release policies governing the RHEL-10 update stream, which prevents this type of change.
To resolve this, the change will be fully reverted in RHEL-10 by restoring all the previously deleted files.
- /etc/pki/tls/cert.pem
- /etc/pki/tls/certs/ca-bundle.trust.crt
- /etc/pki/tls/certs/ca-certificates.crt
The original goal of removing these files is postponed and will be properly re-attempted in the RHEL-11 development cycle.
- links to
-
RHBA-2025:155177 ca-certificates update