[arch-general] p11-kit
Am I the only one who noticed something "unusal" when running $ grep p11-kit $HOME/.xsession-errors ? I cared about https://www.archlinux.org/news/ca-certificates-update/ .
On Sun, 14 Dec 2014 23:07:27 +0100, Ralf Mardorf wrote:
I get tons of "p11-kit: certificate with distrust in location for anchors: [...].pem" in .xsession-errors. However, I missed to rename them from [...].pem to [...].crt and will do it now, assumed it's needed. I never add one and they don't belong to a package: # pacman -Qo [...].pem error: No package owns [...].pem Can I delete them?
On 12/16/2014 04:13 AM, Ralf Mardorf wrote:
I don't think you're supposed to. They are created when the certificate packages are installed. From my understanding, in this case "locally installed" means anything you installed manually. <https://bbs.archlinux.org/viewtopic.php?pid=1483835#p1483835> --Kyle
On Tue, 16 Dec 2014 06:49:55 -0800, Kyle Terrien wrote:
Thank you. It's not always easy to remember what was done or never was done manually. $ cat .xsession-errors [snip] p11-kit: certificate with distrust in location for anchors: Explicitly_Distrusted_[snip].crt [snip] I restored the original state by # rm /etc/ssl/certs/* # cd /etc/ca-certificates/trust-source/anchors/ # rename -v \.crt .pem * # mv * /etc/ssl/certs/ # trust extract-compat and now there aren't p11-kit messages in $HOME/.xsession-errors anymore. Regards, Ralf
participants (2)
-
Kyle Terrien
-
Ralf Mardorf