all 8 comments

sorted by: hot top controversial new old
[–] 5 points 1 year ago (3 children)

If they could just decide where TLS certificates live...

  • source
  • hideshow 3 child comments
  • [–] 4 points 1 year ago* (2 children)

    Most distros have /etc/ssl/certs/ca-certificates.crt, sometimes it is a symlink but that location is there in ubuntu, alpine, fedora and arch.

    edit: Also you can usually change this location with an env variable.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 1 year ago (1 child)
  • [–] 3 points 1 year ago

    That's the real location of the certs, but once again they usually make a symlink in /etc/ssl/certs/ca-certificates.crt

    One library that is problematic is p11-kit, this one usually comes with a different path to the certs hardcoded and does not respect env variables unless it is compiled with a specific flag which no distro uses.

    So I had to do this hack to fix that library.

  • source
  • parent
  • [–] 5 points 1 year ago (2 children)

    And unsurprisingly, a majority of the comments on that post are complaining about systemd.

  • source
  • hideshow 2 child comments
  • [–] 2 points 1 year ago (1 child)

    man 7 hier is much older than linux itself. The 1994 start date in the article is not doing the history of the tradition justice.

    It would have been weirder if the creepy "init system" (with its 58 executables and counting, 52 + 6 arg0 links) dictating the future of that tradition didn't raise some eye brows.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 1 year ago

    low effort link post.

  • source