Re: [ANNOUNCEMENT] Test: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.86 (TEST)

[Brian Inglis <Brian.Inglis@SystematicSw.ab.ca>]

On Thu, 03 Nov 2022 08:36:59 +0100, ASSI wrote:
> Lemures Lemniscati writes:
>> curl: (60) SSL certificate problem: unable to get local issuer certificate
>> More details here: https://curl.se/docs/sslcerts.html
>>
>> curl failed to verify the legitimacy of the server and therefore could not
>> establish a secure connection to it. To learn more about this situation and
>> how to fix it, please visit the web page mentioned above.
>> ls: cannot access 'index.html': No such file or directory
>> ==========
>>
>> I don't know whether the result is expeced.
>> If so, is there any help?

> Try to run update-ca-trust as the user that originally did the installation.

I think Achim is referring to the fix to an earlier issue, where there were 
similar problems with ca-certificates after p11-kit removed write permission to 
the directory /etc/pki/ca-trust/extracted/pem/directory-hash, so update-ca-trust 
failed when run in the postinstall script.

Check:

$ grep -B1 'chmod' /usr/bin/update-ca-trust
# p11-kit removes write permission to the directory
chmod u+w $DEST/pem/directory-hash
--
/usr/bin/ln -s ../tls-ca-bundle.pem $DEST/pem/directory-hash/ca-bundle.crt
chmod a-w $DEST/pem/directory-hash

You may have to check /etc/pki/ca-trust/extracted/pem/directory-hash permissions 
with ls -l, getfacl, and

$ icacls `cygpath -m /etc/pki/ca-trust/extracted/pem/directory-hash`

if there is still an issue, and fix any permissions issues, or run setup to 
upgrade or reinstall ca-certificates and ...-letsencrypt.

-- 
Take care. Thanks, Brian Inglis			Calgary, Alberta, Canada

La perfection est atteinte			Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter	not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer	but when there is no more to cut
			-- Antoine de Saint-Exupéry