Re: sendmail complains about missing ca-bundle.crt

Mark C. Allman via users wrote:
> On 6/9/26 3:45 AM, [email protected] wrote:
>> On startup, sendmail service complains:
>> 
>> Jun  9 11:07:23 e7 sendmail[4117369]: starting daemon
>> (8.18.2): SMTP+queueing@01:00:00
>> Jun  9 11:07:23 e7 sendmail[4117369]: STARTTLS=server:
>> file /etc/pki/tls/certs/ca-bundle.crt unsafe: No such
>> file or directory
[...]
> I use /etc/ssl/certs/ca-bundle.crt, but that just points
> to /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
> 
> The release notes for F44 mentioned something about no
> longer including /etc/pki/tls/certs/ca-bundle.crt, if I
> recall correctly.

https://fedoraproject.org/wiki/Changes/droppingOfCertPemFile

Generally, you should be able to drop such hard-coded paths
and apps will use the OpenSSL default for these paths.

It appears the sendmail package didn't update its default
config, so a bug to remove and/or adjust that would be in
order too.

-- 
Todd

-- 
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQSvlwC4tRNlCF6x+moHOcdGE+n45gUCaigb0AAKCRAHOcdGE+n4
5jxgAP9sEGiqrtX9eM7lgqTOWYlx3JLtOXg2G3bwnM5cb0zYMQEA/TVhcwCnSRfx
YKQ0kpv6JP9jlu9SpeCD5ZP8WoXzgwU=
=gyxS
-----END PGP SIGNATURE-----