On 2/22/2019 8:41 AM, Ken Moffat via blfs-dev wrote: > Looking at make-ca-1.2 that cacerts appears to be what it should > install, so my problem is merely that make-ca is not working for me. I'm a bit confused. Are you saying that /etc/pki/tls/certs/ca-bundle.crt is not generated?
The bundle files are generated by p11-kit. Running "sudo update-ca-certificates" should list name, keyhash, and trust policy for each of the anchors (and optionally NSSDB and Java P12 if enabled in /etc/make-ca.conf), and then end with the following: Extracting OpenSSL certificates to /etc/ssl/certs...Done! Extracting GNUTLS server auth certificates to /etc/pki/tls/certs/ca-bundle.crt...Done! Extracting GNUTLS S-Mime certificates to /etc/pki/tls/certs/email-ca-bundle.crt...Done! Extracting GNUTLS code signing certificates to /etc/pki/tls/certs/objsign-ca-bundle.crt...Done! Extracting Java cacerts (JKS) to /etc/pki/tls/java/cacerts...Done! --DJ -- http://lists.linuxfromscratch.org/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
