Bugzilla Bug 177298

I updated to app-misc/ca-certificates-20070303 and found that
/etc/ca-certificates.conf had disappeared. As a result, update-ca-certificates
doesn't work anymore, with the following message:

# update-ca-certificates
Updating certificates in /etc/ssl/certs....sed: can't read
/etc/ca-certificates.conf: No such file or directory
sed: can't read /etc/ca-certificates.conf: No such file or directory
done.

This can be fixed with the following patch to the ebuild:

--- ca-certificates-20070303.ebuild.orig        2007-05-06 12:12:37.000000000
+0200
+++ ca-certificates-20070303.ebuild     2007-05-06 12:12:59.000000000 +0200
@@ -30,7 +30,7 @@
        (
        cd "${D}"/usr/share/ca-certificates
        find . -name '*.crt' | sort | cut -b3-
-       ) > etc/ca-certificates.conf
+       ) > "${D}"/etc/ca-certificates.conf

        mv "${D}"/usr/share/doc/{ca-certificates,${PF}} || die
        prepalldocs

Strangely enough, the redirection has been like that since 20050804. I wonder
why it doesn't work anymore. And it's even stranger that
/etc/ca-certificates.conf was removed when that file is not in
CONFIG_PROTECT_MASK:

<<<        obj /usr/share/ca-certificates/cacert.org/cacert.org.crt
--- !mtime obj /usr/share/ca-certificates/brasil.gov.br/brasil.gov.br.crt
--- !mtime obj /usr/sbin/update-ca-certificates
<<<        obj /etc/ca-certificates.conf
--- !empty dir /usr/share/man/man8
--- !empty dir /usr/share/man

Here's my emerge --info, just in case.

# emerge --info
Portage 2.1.2.2 (default-linux/x86/2006.0, gcc-4.1.1, glibc-2.5-r0,
2.6.19-rbl-r5 i686)
=================================================================
System uname: 2.6.19-rbl-r5 i686 Intel(R) Pentium(R) M processor 1.60GHz
Gentoo Base System release 1.12.9
Timestamp of tree: Sun, 06 May 2007 01:00:09 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632)
[enabled]
ccache version 2.4 [enabled]
dev-java/java-config: 1.3.7, 2.0.31-r5
dev-lang/python:     2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.4-r7
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-Os -mtune=pentium-m -fomit-frame-pointer -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config
/usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf
/etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c"
CXXFLAGS="-Os -mtune=pentium-m -fomit-frame-pointer -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="ccache collision-protect distcc distlocks fixpackages
metadata-transfer parallel-fetch sandbox sfperms strict userfetch userpriv
usersandbox"
GENTOO_MIRRORS="http://morpheus.sathome/gentoo/
http://mirror.switch.ch/mirror/gentoo/
http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/
http://distfiles.gentoo.org/
http://distro.ibiblio.org/pub/linux/distributions/gentoo/"
LANG="en_US.utf8"
MAKEOPTS="-j4"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude=/distfiles --exclude=/local --exclude=/packages
--filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/sunrise /usr/local/portage"
SYNC="rsync://morpheus.sathome/gentoo-portage"
USE="X aac acl acpi akode alsa arts audiofile avahi bash-completion berkdb
bitmap-fonts bluetooth bzip2 cairo cdb cddb cdparanoia cdr cli cracklib crypt
cups curl dbus dga divx4linux dri dv dvd dvdread eds emboss encode exif expat
fam ffmpeg firefox flac foomaticdb ftp gd gdbm gif gimp glut gmp gpm gstreamer
gtk gtk2 gtkhtml guile hal iconv idn ieee1394 imagemagick imap imlib isdnlog
java jbig jikes jpeg jpeg2k junit kde kdehiddenvisibility lame lcms libg++
libwww logrotate lzo mad maildir mbox midi mikmod mmap mmx mmx2 mng motif mp3
mpeg mplayer ncurses nfs nls nntp nptl nptlonly nsplugin ogg openexr opengl oss
pam pcmcia pcre pda pdf perl plotutils png pppd pthreads python qt qt3 qt4
quicktime readline real reflection rle rtc samba sasl scanner sdl session slang
snmp speex spell spl sqlite sse sse2 ssl subversion svg svga tcl tcltk tcpd
tetex theora threads tiff tk truetype truetype-fonts type1-fonts unicode usb
utempter v4l v4l2 vorbis wifi win32codecs wmf wxwindows x264 x86 xattr xine xml
xml2 xorg xosd xprint xscreensaver xv xvid zeroconf zlib" ALSA_CARDS="ali5451
als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370
ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident
usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy
dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear
meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc"
INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz
cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU"
VIDEO_CARDS="fbdev fglrx radeon vesa"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LDFLAGS, LINGUAS,
PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

Some more info: same problem on another machine. I installed manually using:

  ebuild /usr/portage/app-misc/ca-certificates/ca-certificates-20070303.ebuild
install

and ca-certificates.conf is created in:

  /var/tmp/portage/app-misc/ca-certificates-20070303/work/etc

instead of:

  /var/tmp/portage/app-misc/ca-certificates-20070303/image/etc

fixed in ca-certificates-20070303-r1