http://bugzilla.opensuse.org/show_bug.cgi?id=1028568 http://bugzilla.opensuse.org/show_bug.cgi?id=1028568#c1 Zygmunt Krynicki changed: What |Removed |Added ---------------------------------------------------------------------------- Found By|--- |Community User --- Comment #1 from Zygmunt Krynicki --- To answer my own bug report, this is related to where ssl certificates are stored on OpenSUSE. On my tumbleweed machine I see this: zyga@undvik:/etc/ssl> ls -la razem 20 drwxr-xr-x 1 root root 72 02-25 18:17 . drwxr-xr-x 1 root root 5212 03-08 23:24 .. lrwxrwxrwx 1 root root 38 2016-06-15 ca-bundle.pem -> /var/lib/ca-certificates/ca-bundle.pem lrwxrwxrwx 1 root root 28 2016-06-15 certs -> /var/lib/ca-certificates/pem -rw-r--r-- 1 root root 10835 02-07 12:39 openssl.cnf drwx------ 1 root root 0 02-07 12:39 private At runtime the /etc directory is the real one from the host system but the rest of the filesystem is the one from the core snap. What we will then see is a symlink from /etc/ssl./certs to /var/lib/ca-certificates/pem that is just broken (the symlink). I think this calls into question two design decisions: - the sharing of /etc -- we should probably share less of /etc (perhaps none and then see what's missing) - the way SSL certificates are managed in snappy (both in classic and core installations) -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1028568 http://bugzilla.opensuse.org/show_bug.cgi?id=1028568#c2 Simon Fels changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |morphis@gravedo.de --- Comment #2 from Simon Fels --- @zyga: We already revert /etc/alternatives to come from the core snap, we could do the same with /etc/ssl too to get this particular problem fixed too. -- You are receiving this mail because: You are on the CC list for the bug.