[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ca-certificates symlinks out of /etc

On Tue, Oct 31, 2006 at 07:10:45PM +0100, martin f krafft wrote:
> Since #350282 is still being discussed, I ended up doing
>   cat /etc/ssl/certs/cacert-class3.pem >> /etc/ssl/certs/cacert.pem
> on systems that needed access to all of CACert's certificates.
> The recent ca-certificates upgrade overwrote this "configuration"
> simply because my /bin/cat call actually changed a file in
> /usr/share, where changes by the admin are not preserved. Yet, due
> to the links in /etc/ssl/certs, the admin is given the impression
> that these are configuration files and can thus be edited according
> to Debian's holy conffile handling policy.

The configuration being preserved is a set of symlinks, not the
contents of their targets.

Perhaps this will work better:

ln -s cacert-class3.pem /etc/ssl/certs/cacert.pem

Reply to: