▲ 25 ▼ Finding a successor to the FHS (lwn.net) submitted 1 year ago by cm0002@lemmy.world to c/linux@programming.dev 8 comments fedilink hide all child comments
[–] FizzyOrange@programming.dev 5 points 1 year ago (3 children) If they could just decide where TLS certificates live... permalink fedilink source hideshow 3 child comments replies: [–] Samueru_sama@programming.dev 4 points 1 year ago* (2 children) Most distros have /etc/ssl/certs/ca-certificates.crt, sometimes it is a symlink but that location is there in ubuntu, alpine, fedora and arch. edit: Also you can usually change this location with an env variable. permalink fedilink source parent hideshow 2 child comments replies: [–] FizzyOrange@programming.dev 4 points 1 year ago (1 child) If only it were so simple. https://serverfault.com/a/722646 permalink fedilink source parent hideshow 1 child comment replies: [–] Samueru_sama@programming.dev 3 points 1 year ago That's the real location of the certs, but once again they usually make a symlink in /etc/ssl/certs/ca-certificates.crt One library that is problematic is p11-kit, this one usually comes with a different path to the certs hardcoded and does not respect env variables unless it is compiled with a specific flag which no distro uses. So I had to do this hack to fix that library. permalink fedilink source parent
[–] Samueru_sama@programming.dev 4 points 1 year ago* (2 children) Most distros have /etc/ssl/certs/ca-certificates.crt, sometimes it is a symlink but that location is there in ubuntu, alpine, fedora and arch. edit: Also you can usually change this location with an env variable. permalink fedilink source parent hideshow 2 child comments replies: [–] FizzyOrange@programming.dev 4 points 1 year ago (1 child) If only it were so simple. https://serverfault.com/a/722646 permalink fedilink source parent hideshow 1 child comment replies: [–] Samueru_sama@programming.dev 3 points 1 year ago That's the real location of the certs, but once again they usually make a symlink in /etc/ssl/certs/ca-certificates.crt One library that is problematic is p11-kit, this one usually comes with a different path to the certs hardcoded and does not respect env variables unless it is compiled with a specific flag which no distro uses. So I had to do this hack to fix that library. permalink fedilink source parent
[–] FizzyOrange@programming.dev 4 points 1 year ago (1 child) If only it were so simple. https://serverfault.com/a/722646 permalink fedilink source parent hideshow 1 child comment replies: [–] Samueru_sama@programming.dev 3 points 1 year ago That's the real location of the certs, but once again they usually make a symlink in /etc/ssl/certs/ca-certificates.crt One library that is problematic is p11-kit, this one usually comes with a different path to the certs hardcoded and does not respect env variables unless it is compiled with a specific flag which no distro uses. So I had to do this hack to fix that library. permalink fedilink source parent
[–] Samueru_sama@programming.dev 3 points 1 year ago That's the real location of the certs, but once again they usually make a symlink in /etc/ssl/certs/ca-certificates.crt One library that is problematic is p11-kit, this one usually comes with a different path to the certs hardcoded and does not respect env variables unless it is compiled with a specific flag which no distro uses. So I had to do this hack to fix that library. permalink fedilink source parent