Re: The file /etc/pki/tls/certs/ca-bundle.crt is empty

On 2026-02-23 10:46, 徐持恒 Xu Chiheng via Cygwin wrote:
> # file /etc/pki/tls/certs/ca-bundle.crt
> /etc/pki/tls/certs/ca-bundle.crt: symbolic link to
> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
> 
> # git clone https://gitlab.com/qemu-project/qemu.git
> Cloning into 'qemu'...
> fatal: unable to access 'https://gitlab.com/qemu-project/qemu.git/':
> error adding trust anchors from file: /etc/pki/tls/certs/ca-bundle.crt
> 
> This will cause curl and git not be able to download https urls, and
> will let git build fail to produce a usable git.
> 
> # git clone https://gitlab.com/qemu-project/qemu.git
> Cloning into 'qemu'...
> warning: templates not found in
> /cygdrive/e/Note/Tool/git-cygwin-clang-bfd-release-install/share/git-core/templates
> git: 'remote-https' is not a git command. See 'git --help'.
> fatal: remote helper 'https' aborted session
> 
> Temporary fix(link to a previous working tls-ca-bundle.pem) :
> https://github.com/xu-chiheng/Note/blob/main/.bashrc.d/quirk.sh#L125
> fix_cygwin_tls_certs() {
>      local source=/etc/pki/tls/certs/ca-bundle.crt
>      local target=~/Util/tls-ca-bundle.pem
>      if ! { [ -e "${source}" ] && [ "$(readlink -f "${source}")" =
> "$(readlink -f "${target}")" ] ;}; then
>          rm -rf "${source}" \
>          && ln -s "${target}" "${source}"
>      fi
> }

Works Just Fine For Me: how up to date is your installation?

$ git clone https://gitlab.com/qemu-project/qemu.git
Cloning into 'qemu'...
remote: Enumerating objects: 870635, done.
remote: Counting objects: 100% (18355/18355), done.
remote: Compressing objects: 100% (5177/5177), done.
remote: Total 870635 (delta 13202), reused 18169 (delta 13125), pack-reused 
852280 (from 1)
Receiving objects: 100% (870635/870635), 408.18 MiB | 28.74 MiB/s, done.
Resolving deltas:  76% (556045/729081)
$ ll -gG 
/etc/pki/{ca-trust/extracted/pem/tls-ca-bundle.pem,tls/certs/ca-bundle.crt} 
/usr/bin/git /usr/bin/cygwin1.dll
-r--r--r--   1 241K Oct 15 07:00 /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx   1   49 Oct 15 06:49 /etc/pki/tls/certs/ca-bundle.crt -> 
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
-rwxr-xr-x   1 3.1M Jan  9 10:48 /usr/bin/cygwin1.dll*
-rwxr-xr-x 145 3.7M Aug 30 04:28 /usr/bin/git*
$ cygcheck -f 
/etc/pki/{ca-trust/extracted/pem/tls-ca-bundle.pem,tls/certs/ca-bundle.crt} 
/usr/bin/git /usr/bin/cygwin1.dll
ca-certificates-2025.2.80_v9.0.304-1
ca-certificates-2025.2.80_v9.0.304-1
cygwin-3.6.6-1
git-2.51.0-1
$ cygcheck -c ca-certificates cygwin git
Cygwin Package Information
Package              Version                    Status
ca-certificates      2025.2.80_v9.0.304-1     OK
cygwin               3.6.6-1                  OK
git                  2.51.0-1                 OK

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retrancher  but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple