From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from omta002.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) by sourceware.org (Postfix) with ESMTPS id AF2BA3858406 for ; Thu, 3 Nov 2022 17:48:50 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org AF2BA3858406 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=SystematicSw.ab.ca Authentication-Results: sourceware.org; spf=none smtp.mailfrom=systematicsw.ab.ca Received: from shw-obgw-4003a.ext.cloudfilter.net ([10.228.9.183]) by cmsmtp with ESMTP id qdHLoz7oiSp39qeKgo3RQN; Thu, 03 Nov 2022 17:48:50 +0000 Received: from [10.0.0.5] ([184.64.124.72]) by cmsmtp with ESMTP id qeKfou88CiEh7qeKfoY5Ty; Thu, 03 Nov 2022 17:48:50 +0000 X-Authority-Analysis: v=2.4 cv=O9kqATxW c=1 sm=1 tr=0 ts=6363ff02 a=oHm12aVswOWz6TMtn9zYKg==:117 a=oHm12aVswOWz6TMtn9zYKg==:17 a=IkcTkHD0fZMA:10 a=ugkhXdxtAAAA:8 a=zYKdQnjX3ow_ye51rwQA:9 a=QEXdDO2ut3YA:10 a=BmDG83-NEFsA:10 a=UBqW8vr-10gA:10 a=ZG-MjRxWnTTVGrJRUvVH:22 Message-ID: Date: Thu, 3 Nov 2022 11:48:49 -0600 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.4.1 To: cygwin@cygwin.com Subject: Re: [ANNOUNCEMENT] Test: curl, libcurl{4, -devel, -doc}, mingw64-{x86_64, i686}-curl 7.86 (TEST) Reply-To: cygwin@cygwin.com Content-Language: en-CA In-Reply-To: <87bkpo1obo.fsf@Otto.invalid> From: Brian Inglis Organization: Systematic Software Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfLpgZ33yiuMVuOKK+vfqk646Udrw4mcqGWeDHGvpnDFfhuOyt+RMEiRgcpVJFLDGOVOela7z4VdujuI2kyGXMG3oAEw1oOrw7ibp36Mo/hCic6eNY+sH 9SJZtizy8UPHEsnFeh+KNr7draDMRJONYbHXXjnpmy4edsV+L7nnVA4v9/c+DyOD0Yz2YPL3fPuoEEXI6ml8O6oLnP4AHB8M5a4= X-Spam-Status: No, score=-1163.7 required=5.0 tests=BAYES_00,KAM_DMARC_STATUS,KAM_LAZY_DOMAIN_SECURITY,KAM_SHORT,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On Thu, 03 Nov 2022 08:36:59 +0100, ASSI wrote: > Lemures Lemniscati writes: >> curl: (60) SSL certificate problem: unable to get local issuer certificate >> More details here: https://curl.se/docs/sslcerts.html >> >> curl failed to verify the legitimacy of the server and therefore could not >> establish a secure connection to it. To learn more about this situation and >> how to fix it, please visit the web page mentioned above. >> ls: cannot access 'index.html': No such file or directory >> ========== >> >> I don't know whether the result is expeced. >> If so, is there any help? > Try to run update-ca-trust as the user that originally did the installation. I think Achim is referring to the fix to an earlier issue, where there were similar problems with ca-certificates after p11-kit removed write permission to the directory /etc/pki/ca-trust/extracted/pem/directory-hash, so update-ca-trust failed when run in the postinstall script. Check: $ grep -B1 'chmod' /usr/bin/update-ca-trust # p11-kit removes write permission to the directory chmod u+w $DEST/pem/directory-hash -- /usr/bin/ln -s ../tls-ca-bundle.pem $DEST/pem/directory-hash/ca-bundle.crt chmod a-w $DEST/pem/directory-hash You may have to check /etc/pki/ca-trust/extracted/pem/directory-hash permissions with ls -l, getfacl, and $ icacls `cygpath -m /etc/pki/ca-trust/extracted/pem/directory-hash` if there is still an issue, and fix any permissions issues, or run setup to upgrade or reinstall ca-certificates and ...-letsencrypt. -- Take care. Thanks, Brian Inglis Calgary, Alberta, Canada La perfection est atteinte Perfection is achieved non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add mais lorsqu'il n'y a plus rien à retirer but when there is no more to cut -- Antoine de Saint-Exupéry