{"action":"created","issue":{"url":"https://api.github.com/repos/clearlinux/distribution/issues/241","repository_url":"https://api.github.com/repos/clearlinux/distribution","labels_url":"https://api.github.com/repos/clearlinux/distribution/issues/241/labels{/name}","comments_url":"https://api.github.com/repos/clearlinux/distribution/issues/241/comments","events_url":"https://api.github.com/repos/clearlinux/distribution/issues/241/events","html_url":"https://github.com/clearlinux/distribution/issues/241","id":371254462,"node_id":"MDU6SXNzdWUzNzEyNTQ0NjI=","number":241,"title":"Add ability to have full combined ca-certs file in alternate locations","user":{"login":"puneetse","id":22071208,"node_id":"MDQ6VXNlcjIyMDcxMjA4","avatar_url":"https://avatars1.githubusercontent.com/u/22071208?v=4","gravatar_id":"","url":"https://api.github.com/users/puneetse","html_url":"https://github.com/puneetse","followers_url":"https://api.github.com/users/puneetse/followers","following_url":"https://api.github.com/users/puneetse/following{/other_user}","gists_url":"https://api.github.com/users/puneetse/gists{/gist_id}","starred_url":"https://api.github.com/users/puneetse/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/puneetse/subscriptions","organizations_url":"https://api.github.com/users/puneetse/orgs","repos_url":"https://api.github.com/users/puneetse/repos","events_url":"https://api.github.com/users/puneetse/events{/privacy}","received_events_url":"https://api.github.com/users/puneetse/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-10-17T20:30:14Z","updated_at":"2018-10-22T18:02:23Z","closed_at":null,"author_association":"NONE","body":"**Is your feature request related to a problem? Please describe.**\r\n\r\nReopen of an issue filed here: https://github.com/clearlinux/clrtrust/issues/19\r\n\r\n`clrtrust` places the combined certs under `/var/cache/ca-certs/compat` . \r\n\r\nSome scripts and programs are created to expect the ca-certificates in a specific location - [steamCMD ](https://developer.valvesoftware.com/wiki/SteamCMD) for example looks at the Ubuntu/Debian location `/etc/ssl/certs/ca-certificates.crt` (FreeBSD and other distro users encounter a similar issue here)\r\n\r\n\r\n**Describe the solution you'd like**\r\nSoftware packaged from the Clear upstream is  modified to point to the right place. However, sometime programs from other sources are needed. \r\n\r\nIdeally programs have a more robust method for searching the system locations for trusted certificates, but perhaps this functionality to place a .crt in alternate locations can be added or a change to the way symlinking is done to allow customization like this with where `clrtrust` places certificates.\r\n\r\n\r\n\r\n**Describe alternatives you've considered**\r\nA temporarily work around is by doing a `ln -s /var/cache/ca-certs/compat/ca-roots.pem /etc/ssl/certs/ca-certificates.crt` However when `clrtrust generate` runs again it will be overwritten because the /var/cache/ca-certs/ directory is overwritten .\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/clearlinux/distribution/issues/comments/431917303","html_url":"https://github.com/clearlinux/distribution/issues/241#issuecomment-431917303","issue_url":"https://api.github.com/repos/clearlinux/distribution/issues/241","id":431917303,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMTkxNzMwMw==","user":{"login":"busykai","id":3368515,"node_id":"MDQ6VXNlcjMzNjg1MTU=","avatar_url":"https://avatars0.githubusercontent.com/u/3368515?v=4","gravatar_id":"","url":"https://api.github.com/users/busykai","html_url":"https://github.com/busykai","followers_url":"https://api.github.com/users/busykai/followers","following_url":"https://api.github.com/users/busykai/following{/other_user}","gists_url":"https://api.github.com/users/busykai/gists{/gist_id}","starred_url":"https://api.github.com/users/busykai/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/busykai/subscriptions","organizations_url":"https://api.github.com/users/busykai/orgs","repos_url":"https://api.github.com/users/busykai/repos","events_url":"https://api.github.com/users/busykai/events{/privacy}","received_events_url":"https://api.github.com/users/busykai/received_events","type":"User","site_admin":false},"created_at":"2018-10-22T18:02:23Z","updated_at":"2018-10-22T18:02:23Z","author_association":"MEMBER","body":"@iphutch, Clear does not rely on any locations other than the ones managed by `clrtrust`. All software that is provided by Clear does need anything done/added. This is a workaround for people who bring binary apps from other distros. It might become a \"real\" problem if software we (Clear Linux) make available via other channels (e.g. flatpak) rely on such locations. So far, the use case is not entirely clear to me and I'm not sure if we need to do anything at all."}}
{"actor":{"display_login":"busykai"}}