Re: ca-certificates.sh cannot install?

Re: ca-certificates.sh cannot install?

[Lester Ingber]

I added letsencrypt as you suggested.


I now see:

Package: _/ca-certificates-letsencrypt
ca-certificates-letsencrypt.sh exit code 1
Package: _/Unknown package
ca-certificates.sh exit code 1

Re: ca-certificates.sh cannot install?

[Lester Ingber]

Today, I installed the latest setup (2.930) and saw ca-ceterificates in
the list to be installed -- on just my my wife's PC which does not have
that installed yet, as I have noted in quite a few previous messages
here.

I went through that install, but I still see:
Package: _/ca-certificates
ca-certificates.sh exit code 1

Re: ca-certificates.sh cannot install?

[Lester Ingber]

Brian:

I did what you suggested:


Microsoft Windows [Version 10.0.22631.3007]
(c) Microsoft Corporation. All rights reserved.

C:\cygwin64\home\ingber>
C:\cygwin64\home\ingber>

Re: ca-certificates.sh cannot install?

[Brian Inglis]

On 2024-02-03 17:23, Lester Ingber via Cygwin wrote:
> Apparently, I do not have permissions to send attachments??

$ cmd | tee log /dev/clipboard

OR

$ cat log > /dev/clipboard

then paste into body of email.

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

Re: ca-certificates.sh cannot install?

[Lester Ingber]

Apparently, I do not have permissions to send attachments??

Re: ca-certificates.sh cannot install?

[Brian Inglis]

On 2024-02-01 09:31, Lester Ingber via Cygwin wrote:
> I just tried deleting all ca-cert... with the same negative result.

We do not know what *YOU* mean by that: please *ALWAYS* copy and paste the 
console log or attach a command and output log as text to show what you did, 
what happened, and what messages were displayed.

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

Re: ca-certificates.sh cannot install?

[Brian Inglis]

On 2024-02-01 08:40, Lester Ingber via Cygwin wrote:
> Yes, a Reinstall is the first thing I tried.
> I just tried that again after installing 3.5.0-1, with the same negative
> result.

Presumably you are installing the latest package versions?

There used to be a problem where the programs made the directories read only so 
updates failed.

Check /var/log/setup.log.full for errors perhaps from 
ca-certificates/-letsencrypt or p11-kit.

Try checking permissions by running `ls -dl /etc/pki/ca-trust/**/`:

$ ls -dglo /etc/pki/ca-trust/**/
drwxr-xr-x 1 0 Jan  8 07:36 /etc/pki/ca-trust/
drwxr-xr-x 1 0 Jan  8 07:31 /etc/pki/ca-trust/extracted/
drwxr-xr-x 1 0 Jan  8 07:36 /etc/pki/ca-trust/extracted/edk2/
drwxr-xr-x 1 0 Jan  8 07:36 /etc/pki/ca-trust/extracted/java/
drwxr-xr-x 1 0 Jan  8 07:36 /etc/pki/ca-trust/extracted/openssl/
drwxr-xr-x 1 0 Jan  8 07:36 /etc/pki/ca-trust/extracted/pem/
dr-xr-xr-x 1 0 Jan  8 07:36 /etc/pki/ca-trust/extracted/pem/directory-hash/
drwxr-xr-x 1 0 Jan  8 07:36 /etc/pki/ca-trust/source/
drwxr-xr-x 1 0 Sep  6  2022 /etc/pki/ca-trust/source/anchors/
drwxr-xr-x 1 0 Sep  6  2022 /etc/pki/ca-trust/source/blacklist/

note only directory-hash is read only [used -go to omit ids and reduce width].

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

Re: ca-certificates.sh cannot install?

[Lester Ingber]

I just tried deleting all ca-cert... with the same negative result.

Re: ca-certificates.sh cannot install?

[Lester Ingber]

Yes, a Reinstall is the first thing I tried.

I just tried that again after installing 3.5.0-1, with the same negative
result.

Re: ca-certificates.sh cannot install?

[Marco Atzeri]

On 31/01/2024 19:14, Lester Ingber via Cygwin wrote:
> Assuming we are still in /etc/postinstall/
> I see no file with that name?

that is strange.
Have you tried to re-install the package ?

As the AV eaten the file ?

> On my wife's system (the broken system) I see
> source ca-certificates.sh
> 
> (line is blank)

as it is not there, bash is reading nothing to do.


> On my system, I see only
> ca-certificates.dash.done
> ca-certificates.sh.done

There should be only one

$ ls -l /etc/postinstall/ca-*
-rwxr-xr-x 1 marco Administrators 837 Jan  5 11:06 
/etc/postinstall/ca-certificates.sh.done

ca-certificates.dash.done is likely a residual of the past

> Lester

Regards
Marco

Re: ca-certificates.sh cannot install?

[Lester Ingber]

Assuming we are still in /etc/postinstall/
I see no file with that name?

On my wife's system (the broken system) I see
source ca-certificates.sh

(line is blank)

On my system, I see only
ca-certificates.dash.done
ca-certificates.sh.done

Lester

Re: ca-certificates.sh cannot install?

[Marco Atzeri]

On 31/01/2024 18:36, Lester Ingber via Cygwin wrote:
> The outcome is 1.
> 
> Lester
> 

so you need debugging

$ set -x
$ source  ./ca-certificates.sh

on my system the output is:

+ source ./ca-certificates.sh
++ '[' '!' -e /etc/pki/ca-trust/ca-legacy.conf ']'
++ '[' -f /etc/pki/ca-trust/ca-legacy.conf -a -x /usr/bin/diff ']'
++ /usr/bin/mkdir -p /var/cache/setup/etc/pki/ca-trust
++ /usr/bin/rm -f /var/cache/setup//etc/pki/ca-trust/ca-legacy.conf.diff
++ /usr/bin/diff -wut /etc/pki/ca-trust/ca-legacy.conf 
/etc/defaults/etc/pki/ca-trust/ca-legacy.conf
++ /usr/bin/ca-legacy install
++ /usr/bin/update-ca-trust


Regards
Marco

Re: ca-certificates.sh cannot install?

[Lester Ingber]

The outcome is 1.

Lester

Re: ca-certificates.sh cannot install?

[Marco Atzeri]

On 31/01/2024 17:40, Lester Ingber via Cygwin wrote:
> I just installed the latest Cygwin on our two PCs.  I was hoping this
> would take care of this problem, but it did not.  On just one of the PCs, I see (in black):
> 
> Package: _/Unknown package
>     ca-certificates.sh exit code 1
> 
> The other PC is fine with all installations.
> 
> 

try

$ cd /etc/postinstall
$ ./ca-certificates.sh
$ echo $?

if the outcome is 0 you can just

$ mv ./ca-certificates.sh $ ./ca-certificates.sh.done


Regards
Marco

ca-certificates.sh cannot install?

[Lester Ingber]

I just installed the latest Cygwin on our two PCs.  I was hoping this
would take care of this problem, but it did not.  On just one of the PCs, I see (in black):

Package: _/Unknown package
   ca-certificates.sh exit code 1

The other PC is fine with all installations.