Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-63361

ca-certificates - missing /etc/ssl/certs/ca-certificates.crt (krb5.conf)

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Undefined Undefined
    • None
    • rhel-10.0.beta, rhel-10.0, rhel-10.0.z
    • ca-certificates
    • None
    • No
    • None
    • rhel-sst-security-crypto
    • ssg_security
    • None
    • False
    • Hide

      None

      Show
      None
    • Yes
    • None
    • None
    • None
    • Known Issue
    • Hide
      Cause: User uses the file `/etc/ssl/certs/ca-certificates.crt` in his configuration (krb5.conf, ...) .

      Consequence: Incorrect behavior of the configured application, root certificates missing.

      Workaround (if available): Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem instead (This exact file is here to stay for long).

      Result: We are not "patching" this, users action is needed see. Workaround
      Show
      Cause: User uses the file `/etc/ssl/certs/ca-certificates.crt` in his configuration (krb5.conf, ...) . Consequence: Incorrect behavior of the configured application, root certificates missing. Workaround (if available): Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem instead (This exact file is here to stay for long). Result: We are not "patching" this, users action is needed see. Workaround
    • Proposed
    • None

      After the last update (ca-certificates-2024.2.69_v8.0.303-101.3) the file /etc/ssl/certs/ca-certificates.crt is no longer present, which might impact some of the kerberos configurations

      Please provide the package NVR for which the bug is seen:
       /etc/ssl/certs/ca-certificates.crt

      How reproducible is this bug?:
      Always

      Steps to reproduce

      1. The file /etc/ssl/certs/ca-certificates.crt being used in krb5.conf

      2. ls -a /etc/ssl/certs/ca-certificates.crt
      3. ^2. report file missing

              fkrenzel František Krenželok
              fkrenzel František Krenželok
              František Krenželok František Krenželok
              Alexander Sosedkin Alexander Sosedkin
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: