agners
ca-certificates.crt is empty
Hi, thanks a lot for your work on this Docker container. I am currently trying to use it for a build automation system, but have faced the problem, that the "ca-certificates.crt" file in "/etc/ssl/certs" of your Docker image is empty. The files in "/etc/ca-certificates" are also empty and so I am not able to clone a Git repository without switching SSL checks off or download e.g. the kernel sources to build a new kernel package with it.
Updating the image with "pacman -Syu" doesn't help. Do you have an idea what might be wrong?
UPDATE: I am using the arm32v7 image.
Best regards, Tim
Hi, thanks for reporting the issue.
It seems that there is a relevant package missing, ca-certificates-mozilla in this case. However, something seems to be wrong with p11-kit too, I have to reinstall it:
pacman -Syu ca-certificates-mozilla p11-kit
Then rebuilding the certificate stores takes a moment, and seems to fix the issue you are seeing, at least cloning seems to work:
pacman -S git
git clone https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Really not sure why reinstalling of p11-kit is necessary, I need to look into that more closely.
Maybe the Mozilla certificates should be there by default? https://wiki.archlinux.org/index.php/Transport_Layer_Security#Certificate_authorities
