Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #94011 > unrolled thread

Bug#1146779: dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTP S won't work

Back to article view | Back to linux.debian.kernel

Contents

  Bug#1146779: dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTP S won't work Chris Hofstädtler <zeha@debian.org> - 2026-09-05 18:10 +0200

#94011 — Bug#1146779: dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTP S won't work

Package: dracut-network
Version: 112-2
Severity: important
X-Debbugs-CC: team@grml.org

Hi,

the dracut module 45url-lib installed into dracut-network always 
produces this warning:
  dracut[W]: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTPS won't work

I assume the warning is correct.

Looking at the implementation in 
/usr/lib/dracut/modules.d/45url-lib/module-setup.sh , it appears to 
discover the CA bundle compiled into curl by grepping the libcurl.so 
binary. However it only tries /usr/lib, which is not where Debian 
installs libcurl. It would also need to try 
/usr/lib/<multiarch-triplet>.

I imagine instead of discovering the path, on Debian it could just 
copy /etc/ssl/certs/ca-certificates.crt , which is the 
Debian-blessed CA bundle.

Please fix 45url-lib somehow; I imagine either support multiarch 
paths or assume the Debian CA bundle path.

Many thanks,
Chris

[toc] | [standalone]

Back to top | Article view | linux.debian.kernel

csiph-web