[arch-general] p11-kit

[Ralf Mardorf]

On Tue, 16 Dec 2014 06:49:55 -0800, Kyle Terrien wrote:
> On 12/16/2014 04:13 AM, Ralf Mardorf wrote:
> > I never add one and they don't belong to a package:
> > # pacman -Qo [...].pem error: No package owns [...].pem
> > 
> > Can I delete them?
> 
> I don't think you're supposed to.  They are created when the
> certificate packages are installed.
> 
> From my understanding, in this case "locally installed" means anything
> you installed manually.
> 
> <https://bbs.archlinux.org/viewtopic.php?pid=1483835#p1483835>

Thank you.

It's not always easy to remember what was done or never was done manually.

$ cat .xsession-errors
[snip]
p11-kit: certificate with distrust in location for anchors: Explicitly_Distrusted_[snip].crt
[snip]

I restored the original state by

# rm /etc/ssl/certs/*
# cd /etc/ca-certificates/trust-source/anchors/
# rename -v \.crt .pem *
# mv * /etc/ssl/certs/
# trust extract-compat

and now there aren't p11-kit messages in $HOME/.xsession-errors anymore.

Regards,
Ralf