[opensuse-factory] TW /etc/ssl/certs destroyed, no networking or desktop after update
LS, I am annoyed that once in a (short) while my tumbleweed /etc/ssl/certs directory is being destroyed and repopulated with new certs. The latter is fine, but deleting my own certificates is not such a good idea. Please, make your updates but keep hands of other certificates. Today, after the latest update, I also lost my network connections as well as my Xcfe desktop (which froze the system). I can only get my network back after using 'yast2 lan', which restarts the service again. I have to do that now after every reboot. This is one of those - luckily very rare - moments that TW is a wrong choice for use on a production server ;) However, every 8 months an update with (again/still) outdated software - like 15.1 - is also not tempting. --- Frans. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 10/28/19 9:53 PM, Frans de Boer wrote:
I am annoyed that once in a (short) while my tumbleweed /etc/ssl/certs directory is being destroyed and repopulated with new certs. The latter is fine, but deleting my own certificates is not such a good idea. Please, make your updates but keep hands of other certificates.
Make sure to put your own trust anchor CA certs herein: /etc/pki/trust/anchors/ Then update-ca-certificates will also add them to directory /etc/ssl/certs/ and file /etc/ssl/ca-bundle.pem. Ciao, Michael.
On 28-10-2019 21:58, Michael Ströder wrote:
On 10/28/19 9:53 PM, Frans de Boer wrote:
I am annoyed that once in a (short) while my tumbleweed /etc/ssl/certs directory is being destroyed and repopulated with new certs. The latter is fine, but deleting my own certificates is not such a good idea. Please, make your updates but keep hands of other certificates. Make sure to put your own trust anchor CA certs herein:
/etc/pki/trust/anchors/
Then update-ca-certificates will also add them to directory /etc/ssl/certs/ and file /etc/ssl/ca-bundle.pem.
Ciao, Michael.
Thnx, that solved my certificate issue. Now the rest ;) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 28-10-2019 22:36, Frans de Boer wrote:
On 28-10-2019 21:58, Michael Ströder wrote:
On 10/28/19 9:53 PM, Frans de Boer wrote:
I am annoyed that once in a (short) while my tumbleweed /etc/ssl/certs directory is being destroyed and repopulated with new certs. The latter is fine, but deleting my own certificates is not such a good idea. Please, make your updates but keep hands of other certificates. Make sure to put your own trust anchor CA certs herein:
/etc/pki/trust/anchors/
Then update-ca-certificates will also add them to directory /etc/ssl/certs/ and file /etc/ssl/ca-bundle.pem.
Ciao, Michael.
Thnx, that solved my certificate issue. Now the rest ;)
Ok, it took me some time, but only after a complete unconditional update, was everything working again. So, it's unclear why after the last normal update yesterday, the system became corrupted to the point that I could only use it as single user - even after init 2 or 3 - and that even trying to use it in init 5, the complete system was frozen. -- Frans. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (2)
-
Frans de Boer -
Michael Ströder