Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 278675

Summary: app-misc/ca-certificates-20090709: fresh install installs broken symlinks to SSL certificates
Product: Gentoo Linux Reporter: Martin Mokrejš <mmokrejs>
Component: New packagesAssignee: Gentoo's Team for Core System packages <base-system>
Status: RESOLVED INVALID    
Severity: normal    
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Martin Mokrejš 2009-07-22 12:39:09 UTC
I have just installed a new machine as ~amd64. I wonder why I get this after running update:



 * Messages for package app-misc/ca-certificates-20090709:

 * Broken symlink for a certificate at /etc/ssl/certs/class3.pem
 * Broken symlink for a certificate at /etc/ssl/certs/root.pem
 * Broken symlink for a certificate at /etc/ssl/certs/UTN_USERFirst_Object_Root_CA.pem
 * Broken symlink for a certificate at /etc/ssl/certs/QuoVadis_Root_Certification_Authority.pem
 * You MUST remove the above broken symlinks
 * Otherwise any SSL validation that use the directory may fail!
 * To batch-remove them, run:
 * find -L /etc/ssl/certs/ -type l -exec rm {} +

# equery belongs class3.pem
 * Searching for class3.pem ... 
#
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2009-07-25 23:53:02 UTC
You're on crack.

ca-certificates is NOT installing broken symlinks, it's detecting any that are broken and already present on your system from some time in the past. They were never owned by any package.