Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-109482

ca-certificates: revert changes introduced by "dropping of cert.pem" change now postopend to RHEL-11 [RHEL-10.1]

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Obsolete
    • Icon: Major Major
    • None
    • rhel-10.0, rhel-10.1, rhel-10.1.z, rhel-10.2
    • ca-certificates
    • No
    • Important
    • 2
    • rhel-security-crypto-clubs
    • 0
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • Crypto25September, Crypto25October
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      The implementation of Changes/droppingOfCertPemFile was only partially executed: the bundle `/etc/pki/tls/certs/ca-bundle.crt` was unfortunately left behind.

      This has resulted in two issues:

      1. Package Failures: Packages that still had a dependency on some bundle files that were removed are now broken.
      1. Blocked Fix: The remaining legacy file ca-bundle.crt cannot be removed now due to release policies governing the RHEL-10 update stream, which prevents this type of change.

      To resolve this, the change will be fully reverted in RHEL-10 by restoring all the previously deleted files.

      • /etc/pki/tls/cert.pem
      • /etc/pki/tls/certs/ca-bundle.trust.crt
      • /etc/pki/tls/certs/ca-certificates.crt

       

      The original goal of removing these files is postponed and will be properly re-attempted in the RHEL-11 development cycle.

              fkrenzel František Krenželok
              fkrenzel František Krenželok
              František Krenželok František Krenželok
              Alexander Sosedkin Alexander Sosedkin
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: