Hi Michael,

Michael Shuler wrote:
> Thanks for the details. #895473 reported a similar error on locally
> installed CA certificates, which I think may be related.

That other bug report indeed looks similar albeit not identical.

> I've tried a number of upgrades from a March 29 unstable chroot, as well
> as from stretch to unstable on openstack instances, on both amd64 and
> i386 (I don't think arch is dependent), and I've been unable to get a
> similar error to present itself.

Doesn't surprise me. From about ten machines with Debian unstable, I
only ran into that issue on two machines, one amd64 and one i386.

> Each way I've tried, I get the package-removed certificates prefixed
> properly and no errors, so haven't been able to reproduce this, yet. I
> will keep trying with different options and see if I can figure out
> where the problem is. If someone has a good way to reproduce, I'd
> appreciate it!

Sorry, can't help there at the moment as I have no idea what makes the
two machines, on which I ran into it, so special. I just wanted to add
some more facts:

Downgrading ca-certificates to the version from testing (20170717)
fixes the issue and seems to clean up the broken files, symlinks, …
well.

On all machines I ran into that issue I was no more able to run "apt
update" or similar, since I use HTTPS in my sources.list and
certificate validation failed and hence I was unable to download new
package lists and hence unable to download any package updates, too.

(That's why I've now downgraded ca-certificates on my two affected
machines.)

                Regards, Axel
-- 
 ,''`.  |  Axel Beckert <a...@debian.org>, https://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5
  `-    |  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE

Reply via email to