X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org AF2BA3858406
Authentication-Results:	sourceware.org; dmarc=none (p=none dis=none)
	header.from=SystematicSw.ab.ca
Authentication-Results:	sourceware.org;
	spf=none smtp.mailfrom=systematicsw.ab.ca
X-Authority-Analysis:	v=2.4 cv=O9kqATxW c=1 sm=1 tr=0 ts=6363ff02
	a=oHm12aVswOWz6TMtn9zYKg==:117 a=oHm12aVswOWz6TMtn9zYKg==:17
	a=IkcTkHD0fZMA:10 a=ugkhXdxtAAAA:8 a=zYKdQnjX3ow_ye51rwQA:9 a=QEXdDO2ut3YA:10
	a=BmDG83-NEFsA:10 a=UBqW8vr-10gA:10 a=ZG-MjRxWnTTVGrJRUvVH:22
Message-ID:	<a898eab2-9365-1ca5-e869-886ca4faaf19@SystematicSw.ab.ca>
Date:	Thu, 3 Nov 2022 11:48:49 -0600
MIME-Version:	1.0
User-Agent:	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
	Thunderbird/102.4.1
To:	cygwin AT cygwin DOT com
Subject:	Re: [ANNOUNCEMENT] Test: curl, libcurl{4, -devel, -doc},
	mingw64-{x86_64, i686}-curl 7.86 (TEST)
In-Reply-To:	<87bkpo1obo.fsf@Otto.invalid>
From:	Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Organization:	Systematic Software
X-CMAE-Envelope:	MS4xfLpgZ33yiuMVuOKK+vfqk646Udrw4mcqGWeDHGvpnDFfhuOyt+RMEiRgcpVJFLDGOVOela7z4VdujuI2kyGXMG3oAEw1oOrw7ibp36Mo/hCic6eNY+sH
	9SJZtizy8UPHEsnFeh+KNr7draDMRJONYbHXXjnpmy4edsV+L7nnVA4v9/c+DyOD0Yz2YPL3fPuoEEXI6ml8O6oLnP4AHB8M5a4=
X-Spam-Status:	No, score=-1163.7 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
	KAM_LAZY_DOMAIN_SECURITY, KAM_SHORT, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,
	SPF_NONE, TXREP autolearn=no autolearn_force=no version=3.4.6
X-Spam-Checker-Version:	SpamAssassin 3.4.6 (2021-04-09) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	cygwin AT cygwin DOT com
Errors-To:	cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
X-MIME-Autoconverted:	from base64 to 8bit by delorie.com id 2A3Hncp5001034

On Thu, 03 Nov 2022 08:36:59 +0100, ASSI wrote:
> Lemures Lemniscati writes:
>> curl: (60) SSL certificate problem: unable to get local issuer certificate
>> More details here: https://curl.se/docs/sslcerts.html
>>
>> curl failed to verify the legitimacy of the server and therefore could not
>> establish a secure connection to it. To learn more about this situation and
>> how to fix it, please visit the web page mentioned above.
>> ls: cannot access 'index.html': No such file or directory
>> ==========
>>
>> I don't know whether the result is expeced.
>> If so, is there any help?

> Try to run update-ca-trust as the user that originally did the installation.

I think Achim is referring to the fix to an earlier issue, where there were 
similar problems with ca-certificates after p11-kit removed write permission to 
the directory /etc/pki/ca-trust/extracted/pem/directory-hash, so update-ca-trust 
failed when run in the postinstall script.

Check:

$ grep -B1 'chmod' /usr/bin/update-ca-trust
# p11-kit removes write permission to the directory
chmod u+w $DEST/pem/directory-hash
--
/usr/bin/ln -s ../tls-ca-bundle.pem $DEST/pem/directory-hash/ca-bundle.crt
chmod a-w $DEST/pem/directory-hash

You may have to check /etc/pki/ca-trust/extracted/pem/directory-hash permissions 
with ls -l, getfacl, and

$ icacls `cygpath -m /etc/pki/ca-trust/extracted/pem/directory-hash`

if there is still an issue, and fix any permissions issues, or run setup to 
upgrade or reinstall ca-certificates and ...-letsencrypt.

-- 
Take care. Thanks, Brian Inglis			Calgary, Alberta, Canada

La perfection est atteinte			Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter	not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer	but when there is no more to cut
			-- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -