/etc/pki/tls/certs/ca-bundle.crt is not a symlink in CentOS 7.5

[gerases]

Hi,

In CentOS 7.4,

Code: Select all

/etc/pki/tls/certs/ca-bundle.crt

is a symlink to

Code: Select all

/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

.

In CentOS 7.5, /etc/pki/tls/certs/ca-bundle.crt is a standalone file.

Has something changed?

Thanks!
Sergei

[avij]

It is still a symlink here. Perhaps your ca-legacy setting is different, or something in your installation scripts (or similar) broke the link. You can try this on a fresh installation. It is also possible that different security profiles that can be set in installer can affect this, although I haven't checked. This install I had was done with the default security profile, I didn't change that setting at all.

Code: Select all

[root@c75minimal ~]# ls -l /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem /etc/pki/tls/certs/ca-bundle.crt
-r--r--r--. 1 root root 211658 Jul 11 18:17 /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx. 1 root root     49 Jul 11 18:17 /etc/pki/tls/certs/ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
[root@c75minimal ~]# ca-legacy check
Legacy CAs are set to DEFAULT in file /etc/pki/ca-trust/ca-legacy.conf (affects install/upgrade)
Status of symbolic link /etc/pki/ca-trust/source/ca-bundle.legacy.crt:
/usr/share/pki/ca-trust-legacy/ca-bundle.legacy.default.crt