Re: ca-certificates symlinks out of /etc
On Tue, Oct 31, 2006 at 07:10:45PM +0100, martin f krafft wrote:
> Since #350282 is still being discussed, I ended up doing
>
> cat /etc/ssl/certs/cacert-class3.pem >> /etc/ssl/certs/cacert.pem
>
> on systems that needed access to all of CACert's certificates.
>
> The recent ca-certificates upgrade overwrote this "configuration"
> simply because my /bin/cat call actually changed a file in
> /usr/share, where changes by the admin are not preserved. Yet, due
> to the links in /etc/ssl/certs, the admin is given the impression
> that these are configuration files and can thus be edited according
> to Debian's holy conffile handling policy.
The configuration being preserved is a set of symlinks, not the
contents of their targets.
Perhaps this will work better:
ln -s cacert-class3.pem /etc/ssl/certs/cacert.pem
Reply to: