On Thu, 03 Nov 2022 08:36:59 +0100, ASSI wrote:
Lemures Lemniscati writes:
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
ls: cannot access 'index.html': No such file or directory
==========

I don't know whether the result is expeced.
If so, is there any help?

Try to run update-ca-trust as the user that originally did the installation.

I think Achim is referring to the fix to an earlier issue, where there were similar problems with ca-certificates after p11-kit removed write permission to the directory /etc/pki/ca-trust/extracted/pem/directory-hash, so update-ca-trust failed when run in the postinstall script.

Check:

$ grep -B1 'chmod' /usr/bin/update-ca-trust
# p11-kit removes write permission to the directory
chmod u+w $DEST/pem/directory-hash
--
/usr/bin/ln -s ../tls-ca-bundle.pem $DEST/pem/directory-hash/ca-bundle.crt
chmod a-w $DEST/pem/directory-hash

You may have to check /etc/pki/ca-trust/extracted/pem/directory-hash permissions with ls -l, getfacl, and

$ icacls `cygpath -m /etc/pki/ca-trust/extracted/pem/directory-hash`

if there is still an issue, and fix any permissions issues, or run setup to upgrade or reinstall ca-certificates and ...-letsencrypt.

--
Take care. Thanks, Brian Inglis                 Calgary, Alberta, Canada

La perfection est atteinte                      Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter     not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer        but when there is no more to cut
                        -- Antoine de Saint-Exupéry

--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

Reply via email to