Package: dracut-network
Version: 112-2
Severity: important
X-Debbugs-CC: [email protected]

Hi,

the dracut module 45url-lib installed into dracut-network always 
produces this warning:
  dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTPS won't work

I assume the warning is correct.

Looking at the implementation in 
/usr/lib/dracut/modules.d/45url-lib/module-setup.sh , it appears to 
discover the CA bundle compiled into curl by grepping the libcurl.so 
binary. However it only tries /usr/lib, which is not where Debian 
installs libcurl. It would also need to try 
/usr/lib/<multiarch-triplet>.

I imagine instead of discovering the path, on Debian it could just 
copy /etc/ssl/certs/ca-certificates.crt , which is the 
Debian-blessed CA bundle.

Please fix 45url-lib somehow; I imagine either support multiarch 
paths or assume the Debian CA bundle path.

Many thanks,
Chris

Reply via email to