Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #94011

Bug#1146779: dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTP S won't work

Cross-posted to 2 groups.

Show all headers | View raw

Package: dracut-network
Version: 112-2
Severity: important
X-Debbugs-CC: team@grml.org

Hi,

the dracut module 45url-lib installed into dracut-network always 
produces this warning:
  dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTPS won't work

I assume the warning is correct.

Looking at the implementation in 
/usr/lib/dracut/modules.d/45url-lib/module-setup.sh , it appears to 
discover the CA bundle compiled into curl by grepping the libcurl.so 
binary. However it only tries /usr/lib, which is not where Debian 
installs libcurl. It would also need to try 
/usr/lib/<multiarch-triplet>.

I imagine instead of discovering the path, on Debian it could just 
copy /etc/ssl/certs/ca-certificates.crt , which is the 
Debian-blessed CA bundle.

Please fix 45url-lib somehow; I imagine either support multiarch 
paths or assume the Debian CA bundle path.

Many thanks,
Chris

Back to linux.debian.kernel | Previous | Next | Find similar | Unroll thread

Thread

Bug#1146779: dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTP S won't work Chris Hofstädtler <zeha@debian.org> - 2026-09-05 18:10 +0200

csiph-web