/etc/pki/tls/certs/ca-bundle.crt is not a symlink in CentOS 7.5

General support questions
Post Reply
gerases
Posts: 1
Joined: 2018/07/15 23:36:04

/etc/pki/tls/certs/ca-bundle.crt is not a symlink in CentOS 7.5

Post by gerases » 2018/07/15 23:43:18

Hi,

In CentOS 7.4,

Code: Select all

/etc/pki/tls/certs/ca-bundle.crt
is a symlink to

Code: Select all

/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
.

In CentOS 7.5, /etc/pki/tls/certs/ca-bundle.crt is a standalone file.

Has something changed?

Thanks!
Sergei

User avatar
avij
Forum Moderator
Posts: 2792
Joined: 2010/12/01 19:25:52
Location: Helsinki, Finland
Contact:

Re: /etc/pki/tls/certs/ca-bundle.crt is not a symlink in CentOS 7.5

Post by avij » 2018/07/16 02:12:23

It is still a symlink here. Perhaps your ca-legacy setting is different, or something in your installation scripts (or similar) broke the link. You can try this on a fresh installation. It is also possible that different security profiles that can be set in installer can affect this, although I haven't checked. This install I had was done with the default security profile, I didn't change that setting at all.

Code: Select all

[root@c75minimal ~]# ls -l /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem /etc/pki/tls/certs/ca-bundle.crt
-r--r--r--. 1 root root 211658 Jul 11 18:17 /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx. 1 root root     49 Jul 11 18:17 /etc/pki/tls/certs/ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
[root@c75minimal ~]# ca-legacy check
Legacy CAs are set to DEFAULT in file /etc/pki/ca-trust/ca-legacy.conf (affects install/upgrade)
Status of symbolic link /etc/pki/ca-trust/source/ca-bundle.legacy.crt:
/usr/share/pki/ca-trust-legacy/ca-bundle.legacy.default.crt

Post Reply