[Pkg-openssl-devel] Bug#996048: postfix-mta-sts-resolver: autopkgtest doesn't handle new version of ca-certificates nicely: rehash: warning: skipping ca-certificates.crt, it does not contain exactly one certificate or CRL

[Julien Cristau]

On Mon, Oct 18, 2021 at 02:50:50PM +0200, Benjamin Hof wrote:
> Hi,
> 
> I think the following change might be the relevant one:
> 
>     --- a/update-ca-certificates
>     +++ b/update-ca-certificates
>     @@ -164,8 +164,6 @@
>        done
>      fi
> 
>     -rm -f "$CERTBUNDLE"
>     -
>      ADDED_CNT=$(wc -l < "$ADDED")
>      REMOVED_CNT=$(wc -l < "$REMOVED")
> 
> It triggers this stderr output during openssl rehash (l. 184):
> 
>     rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
> 
Ah, that makes sense.  Annoying...

Kurt/Sebastian, do you think there's a chance openssl rehash could grow
some sort of ignore option so update-ca-certificates could ask it to
skip ca-certificates.crt, to avoid spitting out a warning for it?

Thanks,
Julien